4 ms·

Yes, I'm reminded of this fairly well known quote within the security world - "security is a process, not a product". I do not trust anyone to house any data o

Yes, I'm reminded of this fairly well known quote within the security world - "security is a process, not a product". I do not trust anyone to house any data of mine that I consider too important or sensitive to put at risk - unless there is end to end encryption so that no one except me can access it at any time. That's about the only exception. If I am not sending the data over already encrypted, forget it. I try to do as much in house as possible. Also, let's not forget the risk of unintended affiliations - there have been several times when law enforcement has seized drives/servers that were shared and the non-offending users that were simply sharing the resource ended up having their sites unintentionally taken offline. That may not really apply to cloud storage, but it definitely applies to shared hosting services, which are abundant and widely used. Could totally screw over a small business.

emodendroket 10y ago
But the question, to my mind, is whether putting stuff on the cloud is going to be more or less secure than handling it yourself. Depending on what people and resources you have, it may well be more secure.
AnimalMuppet 10y ago
It depends on your threat model. Data security has three components: confidentiality (nobody else can read it), integrity (nobody else can change it), and availability (I can get at it when I need it). If you're mostly worried about confidentiality, cloud storage may have too much risk for you. If you're primarily worried about integrity or availability, though, cloud storage (plus a local copy) is a big improvement.
- turc1656 10y ago
  Good point. Yes, for me confidentiality is the primary concern. I run my own data duplication tasks to close the integrity gap. And availability is largely a non-issue for what I'm doing. That's why I choose many times to not use cloud services but they may serve the purposes of others, especially if they are not as technically savvy.

emodendroket 10y ago

But the question, to my mind, is whether putting stuff on the cloud is going to be more or less secure than handling it yourself. Depending on what people and resources you have, it may well be more secure.

AnimalMuppet 10y ago

It depends on your threat model. Data security has three components: confidentiality (nobody else can read it), integrity (nobody else can change it), and availability (I can get at it when I need it). If you're mostly worried about confidentiality, cloud storage may have too much risk for you. If you're primarily worried about integrity or availability, though, cloud storage (plus a local copy) is a big improvement.

turc1656 10y ago
Good point. Yes, for me confidentiality is the primary concern. I run my own data duplication tasks to close the integrity gap. And availability is largely a non-issue for what I'm doing. That's why I choose many times to not use cloud services but they may serve the purposes of others, especially if they are not as technically savvy.