6 ms·
"Amazon never participated in the NSA’s PRISM program." - Stephen Schmidt, CISO @ AWS https://aws.amazon.com/blogs/security/privacy-and-data-security/ https://
by colmmacc 10y ago
"Amazon never participated in the NSA’s PRISM program." - Stephen Schmidt, CISO @ AWS
https://aws.amazon.com/blogs/security/privacy-and-data-security/ https://aws.amazon.com/blogs/security/privacy-and-data-secur...
(Full disclosure: I work on AWS}.
- deleted 10y ago[deleted]
- StavrosK 10y agoHe wouldn't voluntarily make a comment lying about it either.
- ekianjo 10y agothe NSA chief had no problem to lie dirEctly in front of Congress.
- Zach_the_Lizard 10y agoIf it was classified information, he would likely not be able to admit it. After double checking, the slides do not mention Amazon. Amazon could be involved with spying though, just not under the same program. We'll never know for sure. What a world we live in.
- deleted 10y ago[deleted]
- Zach_the_Lizard 10y agoAnd what do all the PRISM documents say? You don't admit this as it's bad for business.
- docdendrite 10y agoThey say corporate data centers were surreptitiously wiretapped.
- saycheese 10y agoAmazon wasn't listed on the PRISM partners slide. What documents are you referencing? EDIT: General info on PRISM: https://en.m.wikipedia.org/wiki/PRISM_(surveillance_program) https://en.m.wikipedia.org/wiki/PRISM_(surveillance_program) "PRISM Partners" slide: https://commons.m.wikimedia.org/wiki/File:Prism_slide_5.jpg https://commons.m.wikimedia.org/wiki/File:Prism_slide_5.jpg
- Zach_the_Lizard 10y agoI double checked and you're right, they are not mentioned. I could have sworn they were. I stand corrected.
- aphextron 10y ago>"Amazon never participated in the NSA’s PRISM program." - Stephen Schmidt, CISO @ AWS As true as this may be, the only acceptable form of privacy guarantee is through cryptographic algorithms and open source software. Anything else is a fantasy tale.
- verbify 10y agoThere have been bugs in open source cryptography. E.G. Heartbleed, shellshock, etc. There are state actors that will pay to find the bugs, or put the bugs there (and the underhand C contest shows how hard it is to find the bugs). Open source is not an ironclad guarantee.
- liberatus 10y agoI don't believe claims of perfection were made. Merely claims of a standard of excellence.
- peatmoss 10y agoAnd I wouldn't say standard of excellence--just the possibility of excellence. With closed source you can't have even that. You pretty much have to assume the worst.
- Diederich 10y agoHonest question: how do you feel about Google's security history?
- peatmoss 10y agoI suspect they do a good job at a technical level, but they have interests in advertising that are at odds with my privacy interests. I also have no way to know if they are doing Dark Nefarious Things.
- 10y ago
- manmal 10y agoVW executives were all lying about knowing about their emission "optimizations". You can't believe any statements.
- discordianfish 10y agoDon't Google, Apple, Facebook and friends all say the same?
- andrepd 10y agoTrue or not, their word means actually nothing. I trust cryptography, not a capitalist's word.
- orbifold 10y agoI imagine the collaboration would happen on a need to know basis.
- chinathrow 10y agoThey happily built the CIA a 600m data center though.