3 ms·

If you're truly paranoid, you can certainly encrypt data in RDS with keys that you have and Amazon doesn't. But yes, the rest they expect us to take on faith.

If you're truly paranoid, you can certainly encrypt data in RDS with keys that you have and Amazon doesn't. But yes, the rest they expect us to take on faith. Or trust some boilerplate in their ToS (written by their lawyers, to absolve them of liability).

billiam 6y ago
The encrypted traffic will be the traffic Amazon will be most interested in, since you took the trouble; they won't peek into the DB but they will be able to infer lots about what's going on if they want. It's the Tor Paradox.
- smt1 6y ago
  Yup, it's a classic paradox in information theory and telecommunication theory about entropy and power/energy flows. Do you want to save energy or privacy? Which is stronger hypothesis P=NP? The continuum hypothesis? The fact that physics can't fundamentally integrate relativity or quantum field theory? The ergodic hypothesis? In the spirit of both physics, CS, and math, we are valued by the trust networks who we trust and inform. The failure to integrate means in physical terms we can still create new huge blobs of semantic meaningful value and save energy at the same time by using free distributed cloud v-compute spacetime. You can theorize from any cloud provider Amazon MS Google if they shared info they legally shouldn't have inferred for data privacy reasons. Reason over complexity classes. Personally I live near Washington DC, so with a government change, I will have to reassess what side of the issue ethically I should be reasoning in. Save energy? Encourage monopoly? Join government? Join big tech? Seek rents from big tech? I'm just meditating and creating deferred decision trees for myself postmarked for myself using the "well known" schwartz–zippel lemma and noether's theorem so i have self-determination.
imheretolearn 6y ago
Yes, and you could do anything else that you want with your app. However, if your application is hosted on their servers you are just a traditional user from their perspective. And as the old adage goes, if you own the server, you own the user. There is an implicit assumption, that the code that you push is actually the same one that is being run on the VM, in your statement. This brings me back to the point I was trying to make in the parent comment.

billiam 6y ago

The encrypted traffic will be the traffic Amazon will be most interested in, since you took the trouble; they won't peek into the DB but they will be able to infer lots about what's going on if they want. It's the Tor Paradox.

smt1 6y ago
Yup, it's a classic paradox in information theory and telecommunication theory about entropy and power/energy flows. Do you want to save energy or privacy? Which is stronger hypothesis P=NP? The continuum hypothesis? The fact that physics can't fundamentally integrate relativity or quantum field theory? The ergodic hypothesis? In the spirit of both physics, CS, and math, we are valued by the trust networks who we trust and inform. The failure to integrate means in physical terms we can still create new huge blobs of semantic meaningful value and save energy at the same time by using free distributed cloud v-compute spacetime. You can theorize from any cloud provider Amazon MS Google if they shared info they legally shouldn't have inferred for data privacy reasons. Reason over complexity classes. Personally I live near Washington DC, so with a government change, I will have to reassess what side of the issue ethically I should be reasoning in. Save energy? Encourage monopoly? Join government? Join big tech? Seek rents from big tech? I'm just meditating and creating deferred decision trees for myself postmarked for myself using the "well known" schwartz–zippel lemma and noether's theorem so i have self-determination.

imheretolearn 6y ago

Yes, and you could do anything else that you want with your app. However, if your application is hosted on their servers you are just a traditional user from their perspective. And as the old adage goes, if you own the server, you own the user. There is an implicit assumption, that the code that you push is actually the same one that is being run on the VM, in your statement. This brings me back to the point I was trying to make in the parent comment.