5 ms·

I think it is incredibly fair to say that you shouldn't put data onto the servers of a company if you mind them reading that data. Why should I assume they aren

I think it is incredibly fair to say that you shouldn't put data onto the servers of a company if you mind them reading that data. Why should I assume they aren't? At a bare minimum, the metadata is being actively consumed by the parent company. I don't think this is AWS specific at all.

foota 7y ago
?? Because a cloud company using data like that would be corporate suicide?
- ngold 7y ago
  I would love to hear one case where that has happened. Information is free money, something virtually no company making money on information turns down.
- thinkingemote 7y ago
  "if you are not a fan of big brother"..... "That would be corporate suicide" Yes sometimes protecting personal privacy might be opposed to a corporations profits. The horror of it!
  - manigandham 7y ago
    You’re mixing things up. A corporation is not opposed to corporate profits, and in this case they make profits by safely, securely, and privately storing your data as requested. Not doing so would be a major hit to their business. Whether you trust their reputation and compliance certifications is up to you, but a completely different issue.
busymom0 7y ago
If this was the case, I think we would have had some amazon whistleblower already blow this info and would be widely reported on.
- taormina 7y ago
  I'm not accusing Amazon or anyone else of anything in particular. I'm just reminding people that even if you encrypt all of your data at rest, that at a minimum, every service provider of something like AWS is collecting plenty of metadata about your data. They have to. How else can they tell where your data is and track how much they need to charge you?
  - NicoJuicy 7y ago
    In short, you have nothing to prove it. Sorry, but : > How else can they tell where your data is and track how much they need to charge you? You say companies need to track metadata for pricing and they don't know where your data is without tracking? Huh. I mean, that answer is surreal. I thought you had a console to set everything up and pricing is based on cost + wanted profit. AWS was like something of 33% profit. Nothing of their pricing is based on GA :p ( like wtf)
  - busymom0 7y ago
    > How else can they tell where your data is and track how much they need to charge you? Are you being serious with this question? Regardless of whether they look at your data behind the scenes without telling you or not, you don't need to know what type of exact data and metadata you have to charge you. My AWS bill charges me for CPU hours uptime for the server, network requests, load balancing etc. None of this needs them to know your data or even exactly much metadata (other than what domain and server to route to obviously but that's public information anyway). By your logic, if someone is using end to end encryption, are you saying Amazon wouldn't be able to charge them because they can't look at the encrypted data?
    - taormina 7y ago
      I was thinking more about S3, where I know for a fact that are charging on a per-request basis and a volume basis. Amazon can and should absolutely charge them irrespective of the contents of the blob of data, and regardless of whether they read it or not, my point is encrypt it if you're worried.

foota 7y ago

?? Because a cloud company using data like that would be corporate suicide?

ngold 7y ago
I would love to hear one case where that has happened. Information is free money, something virtually no company making money on information turns down.
thinkingemote 7y ago
"if you are not a fan of big brother"..... "That would be corporate suicide" Yes sometimes protecting personal privacy might be opposed to a corporations profits. The horror of it!
- manigandham 7y ago
  You’re mixing things up. A corporation is not opposed to corporate profits, and in this case they make profits by safely, securely, and privately storing your data as requested. Not doing so would be a major hit to their business. Whether you trust their reputation and compliance certifications is up to you, but a completely different issue.

busymom0 7y ago

If this was the case, I think we would have had some amazon whistleblower already blow this info and would be widely reported on.

taormina 7y ago
I'm not accusing Amazon or anyone else of anything in particular. I'm just reminding people that even if you encrypt all of your data at rest, that at a minimum, every service provider of something like AWS is collecting plenty of metadata about your data. They have to. How else can they tell where your data is and track how much they need to charge you?
- NicoJuicy 7y ago
  In short, you have nothing to prove it. Sorry, but : > How else can they tell where your data is and track how much they need to charge you? You say companies need to track metadata for pricing and they don't know where your data is without tracking? Huh. I mean, that answer is surreal. I thought you had a console to set everything up and pricing is based on cost + wanted profit. AWS was like something of 33% profit. Nothing of their pricing is based on GA :p ( like wtf)
- busymom0 7y ago
  > How else can they tell where your data is and track how much they need to charge you? Are you being serious with this question? Regardless of whether they look at your data behind the scenes without telling you or not, you don't need to know what type of exact data and metadata you have to charge you. My AWS bill charges me for CPU hours uptime for the server, network requests, load balancing etc. None of this needs them to know your data or even exactly much metadata (other than what domain and server to route to obviously but that's public information anyway). By your logic, if someone is using end to end encryption, are you saying Amazon wouldn't be able to charge them because they can't look at the encrypted data?
  - taormina 7y ago
    I was thinking more about S3, where I know for a fact that are charging on a per-request basis and a volume basis. Amazon can and should absolutely charge them irrespective of the contents of the blob of data, and regardless of whether they read it or not, my point is encrypt it if you're worried.