3 ms·
> This shows a new type of cloud hosting vulnerability. Your entire corporations infrastructure could be mirrored faster than you could notice. This is actuall
by cbozeman 6y ago
> This shows a new type of cloud hosting vulnerability. Your entire corporations infrastructure could be mirrored faster than you could notice.
This is actually fucking terrifying.
- WJW 6y agoAdditional interesting scenarios: - Nation states that manage to infiltrate a few spies into Amazon or Google could "just" copy the backups of the database without anyone being the wiser. - My favourite mission ever from the "Shadowrun" games: Step 1 was a mission to alter the backups of some main database (stored at some 3rd party) to include additional admin credentials. Step 2 was to "clumsily" attack the main target and not-quite-hack the main system so that they would restore from backup just to be sure, thereby importing the actual backdoor.
- evgen 6y agoThe problem with this is that in the case of Google/FB/etc the database to be copied is so large as to make this task functionally impossible. Even if you happened to have a half a petabyte of storage available somewhere you would lack the bandwidth to exfiltrate. The problem with Parler is that it was living on a shared cloud so it was easy for someone to spin up copies and use intra-DC copy mechanisms (or even simple volume mirroring) and the data was also small enough to be within reach for anyone who was curious -- it would cost you less than $5K to copy and then export the entire Parler corpus in less than an afternoon.