3 ms·

I tend to agree, the trust I have in Amazon around handling my information security is quite limited - I mean that goes for a lot of cloud providers, but Amazon

by kerng 9y ago

I tend to agree, the trust I have in Amazon around handling my information security is quite limited - I mean that goes for a lot of cloud providers, but Amazon just doesn't seem like an organization that cared much about data protection. I once submitted a couple of bugs to them and wanted a CVE, but only thing they said is. Thanks you, we fixed it but we won't acknowledge any of this externally via CVE, because well, it's the cloud, we don't have bugs or something along those lines.

not_kurt_godel 9y ago
> but Amazon just doesn't seem like an organization that cared much about data protection I challenge you to provide a single shred of evidence in support of this claim.
- kerng 9y ago
  Did you read my paragraph, I have a first hand example. Not being transparent is exactly part of this
  - not_kurt_godel 9y ago
    Perhaps the bug you submitted wasn't worthy of a CVE. It's impossible to know from a single anecdote with basically no details. What I do know is that, to my knowledge, there has never been a single verified publicized breach of any AWS systems that were due to a vulnerability in AWS itself. Care to provide a counterexample?