3 ms·
True and even this assumes a specific limited threat vector: eg. employee has access to storage volume but not encryption key, employee does not have ability to
by kefabean 8y ago
True and even this assumes a specific limited threat vector: eg. employee has access to storage volume but not encryption key, employee does not have ability to dump guest memory, employee has no backdoor mechanism to elevate permissions within account. We have no cast iron guarantees (other than trust) that these limiting controls are in place.
- jiveturkey 8y agoSure, but those things require “lots” of access. Just grabbing a disk or decommissioning half of an HA pair etc requires only “little” access. Just because there are complex vectors doesn’t mean you give up on the basic ones. This is a valuable thing, and for now, a differentiator.