3 ms·

Do you honesty believe that? Maybe I'm too cynical these days, but I find it pretty laughable that a statement regarding 'data sovereignty' has any real meanin

Do you honesty believe that? Maybe I'm too cynical these days, but I find it pretty laughable that a statement regarding 'data sovereignty' has any real meaning at all these days. Unless you control the hardware, you have no idea what the hypervisors are doing on your rented vm's. The idea that national actors don't / wouldn't pull anything they want from them seems comically naive to me. Christ, we can barely trust our own hardware anymore with backdoored firmware crap, IME and such.. Realistically though, most companies don't care so it's not a problem if you keep the blinkers on; their compliance folks just want the document which says it's not happening and they'll never know when it does so who cares. Their ops folks can barely use the APIs probably, let alone contemplate the impact of someone reading the memory of my databases from the hypervisors. As an individual and someone who cares for my data or that of my clients though, that's not enough for me, and I'd never trust tnese folks with any data, only mindless compute and serving public content...

kesor 10y ago
Don't you share this data over networks from time to time? Is all your data siloed and bolted down to one place never to move anywhere? How do you trust the data to not take a hike in some random direction you don't fully trust?
- cryptarch 10y ago
  By encrypting anything you transmit over the Internet?
  - arpa 10y ago
    and anything you have on hardware you don't own. And on hardware you own.
- cyberpunk 10y ago
  Well, depends on the data. Most things are CRUD; Current gig is a load of on-prem DBs' -- AWS boxes might hit an API in one of the datacentres which can query it for a given user, I think there's a difference between using AWS to serve HTTPS vs Hosting the whole db there (this is marketing/tracking data) It's the difference between AWS/USGVT being able to decrypt a HTTP convo to a specifc user after we've combined a lot of data and having access to all 200TB of it..
- kkapelon 10y ago
  Let's say that I am a pharma company. Q. Don't you share this data over networks from time to time? A. Hell no. Q. Is all your data siloed and bolted down to one place never to move anywhere A. Yes that is the plan actually. Q. How do you trust the data to not take a hike in some random direction you don't fully trust A. Easy, it never gets out of my data center. An IT director that works in a pharma company, will simply laugh after reading the "don't build private clouds" article

kesor 10y ago

Don't you share this data over networks from time to time? Is all your data siloed and bolted down to one place never to move anywhere? How do you trust the data to not take a hike in some random direction you don't fully trust?

cryptarch 10y ago
By encrypting anything you transmit over the Internet?
- arpa 10y ago
  and anything you have on hardware you don't own. And on hardware you own.
cyberpunk 10y ago
Well, depends on the data. Most things are CRUD; Current gig is a load of on-prem DBs' -- AWS boxes might hit an API in one of the datacentres which can query it for a given user, I think there's a difference between using AWS to serve HTTPS vs Hosting the whole db there (this is marketing/tracking data) It's the difference between AWS/USGVT being able to decrypt a HTTP convo to a specifc user after we've combined a lot of data and having access to all 200TB of it..
kkapelon 10y ago
Let's say that I am a pharma company. Q. Don't you share this data over networks from time to time? A. Hell no. Q. Is all your data siloed and bolted down to one place never to move anywhere A. Yes that is the plan actually. Q. How do you trust the data to not take a hike in some random direction you don't fully trust A. Easy, it never gets out of my data center. An IT director that works in a pharma company, will simply laugh after reading the "don't build private clouds" article