4 ms·
It almost seems ironic to me to run a personal privacy-protecting server in a cloud VM. If you assume that the "agencies" have access to the "clouds," whether
by alphapapa 10y ago
It almost seems ironic to me to run a personal privacy-protecting server in a cloud VM. If you assume that the "agencies" have access to the "clouds," whether directly through backdoors or through moles, don't you have to assume that they could crawl VMs, detect ones like this that are virtually identical, and automatically install rootkits in them? Or just monitor them by reading memory through the hypervisor? How would you even know if the hypervisor were compromised?
- juliangoldsmith 10y agoThis is more likely a response to the recent reversal of FCC privacy rules. This may not defend against state actors, but will against nosy ISPs.
- danellis 10y agoWhat about the cloud providers' ISPs?
- juliangoldsmith 10y agoBackbone providers provide services to businesses. If one of them was caught monitoring traffic, their reputation would be destroyed.
- bigbugbag 10y agoThat's why they go the extra length not to be caught. Even if they wanted to alert a user that he's monitored, wouldn't national security letter come with a gag order forbidding this ?
- juliangoldsmith 10y agoWe're talking ISPs here, not state actors. If an individual catches the full attention of the NSA, there's not all that much they can do to defend their privacy.
- htrp 10y agoThis is the Mossad argument on cryptography.... if your adversary is Mossad, they'll just rubber hose cryptanalysis you, if your adversary is not Mossad, a proxy is good enough.
- LeoPanthera 10y agoThis is not about defeating "the agencies". This is about protecting your data from your ISP.
- bigbugbag 10y agoPlease don't fall for marketing wording, there's no "cloud". It's called a data center. Choose a data center where the authority you want protection from does not have access, outside of US if you want to prevent your data from being among those sold by ISPs. As usual it depends on the threat model you want to protect from and if you are a high profile target there's not much you can do against a nation state.