6 ms·

if it is in the cloud, it will be eventually hacked

by somurzakov 6y ago

duxup 6y ago
Wouldn't that mean any computer connected to the internet shares that risk?
- somurzakov 6y ago
  yeah, that's why in an average on-prem setup you usually would have firewalls, DMZs, IDS/IPS and all the good stuff - and people have been doing on-prem security for decades and accumulated an enormous wealth of knowledge and practice. in cloud - it all new. people are still figuring out how to deploy their software so that it works both for users and developers. That's why on average onprem is more secure than cloud.
  - duxup 6y ago
    Maybe I'm crazy but I'm not sure all that security makes things more secure than the cloud. I feel like the hacks I hear about are pretty evenly distributed between cloud and on prem type setups... and most of the big ransomware attacks are almost exclusive to on prem.
  - Jonnax 6y ago
    "new" the cloud is not new. AWS was launched in 2006. Also firewalls/DMZ/IDS has nothing to do with a SaaS offering from GitHub. That on prem setup you mentioned would be practiced by GitHub. My opinion of general on-prem security is that it's often haphazard and updates are almost never applied. But also a lot of on prem security practices hamper developers and users. Because they rely on decades old outdated ways of working. Also your comment makes no sense as this is likely to be a hack through stolen credentials.
deleted 6y ago
[deleted]
jaywalk 6y ago
Why?
- qmalsp 6y ago
  Because of C! Rust good, C bad.
- somurzakov 6y ago
  because cloud security (and cloud configuration in general) is hard. people check in sensitive stuff to github repos all the time, misconfigure IAM policies just so that it works (capitalone). It is a new and ever changing field, there are many cloud vendors and their product line and configurations change all the time - meaning it will take a lot of time until majority of IT specialists become familiar with configuring secure cloud and majority of users of those cloud services will not make security mistakes.
  - smolder 6y ago
    That only covers some cases, not the absolute of everything in the cloud eventually being hacked. Plenty of people are competent at secure cloud based systems. Your claim and your support don't match. I expected this to go more in the direction of: cloud providers are such big juicy targets they'll just be infiltrated by advanced persistent threats who in turn gain illicit access to everything hosted.

if it is in the cloud, it will be eventually hacked

duxup 6y ago

Wouldn't that mean any computer connected to the internet shares that risk?

somurzakov 6y ago
yeah, that's why in an average on-prem setup you usually would have firewalls, DMZs, IDS/IPS and all the good stuff - and people have been doing on-prem security for decades and accumulated an enormous wealth of knowledge and practice. in cloud - it all new. people are still figuring out how to deploy their software so that it works both for users and developers. That's why on average onprem is more secure than cloud.
- duxup 6y ago
  Maybe I'm crazy but I'm not sure all that security makes things more secure than the cloud. I feel like the hacks I hear about are pretty evenly distributed between cloud and on prem type setups... and most of the big ransomware attacks are almost exclusive to on prem.
- Jonnax 6y ago
  "new" the cloud is not new. AWS was launched in 2006. Also firewalls/DMZ/IDS has nothing to do with a SaaS offering from GitHub. That on prem setup you mentioned would be practiced by GitHub. My opinion of general on-prem security is that it's often haphazard and updates are almost never applied. But also a lot of on prem security practices hamper developers and users. Because they rely on decades old outdated ways of working. Also your comment makes no sense as this is likely to be a hack through stolen credentials.

deleted 6y ago

[deleted]

jaywalk 6y ago

Why?

qmalsp 6y ago
Because of C! Rust good, C bad.
somurzakov 6y ago
because cloud security (and cloud configuration in general) is hard. people check in sensitive stuff to github repos all the time, misconfigure IAM policies just so that it works (capitalone). It is a new and ever changing field, there are many cloud vendors and their product line and configurations change all the time - meaning it will take a lot of time until majority of IT specialists become familiar with configuring secure cloud and majority of users of those cloud services will not make security mistakes.
- smolder 6y ago
  That only covers some cases, not the absolute of everything in the cloud eventually being hacked. Plenty of people are competent at secure cloud based systems. Your claim and your support don't match. I expected this to go more in the direction of: cloud providers are such big juicy targets they'll just be infiltrated by advanced persistent threats who in turn gain illicit access to everything hosted.