5 ms·
They do all the harvesting. Everything they can. Every morsel of data they can get, they get. Same thing Microsoft does with Windows, github and VSCode. Just
by fartcannon 4y ago
They do all the harvesting. Everything they can. Every morsel of data they can get, they get.
Same thing Microsoft does with Windows, github and VSCode.
Just hoovering up all the ideas you have.
- endisneigh 4y agoif you can prove this you can make a lot of money
- fartcannon 4y agoOh yeah, how?
- endisneigh 4y agoClass action, violation of the Terms and Conditions. I'd honestly be shocked if Google/Microsoft are monitoring the clients of their public cloud and keeping the data to create their own products off of.
- fartcannon 4y agoPrepare to be shocked.
- endisneigh 4y agoproof?
- fartcannon 4y agoThe existence of copilot, for one.
- endisneigh 4y agothat's not proof, lol. That uses publicly available code. are you suggesting it's trained on private code? not to mention I was talking about cloud workloads since you said everything
- fartcannon 4y agoNobody said anything about private or public. What was said was 'everything they can get their hands on'. Thou doth protest too much.
- endisneigh 4y agoeverything they can get their hands on includes both private and public data? they have access to the private data, by definition. the entire point is that it's not exposed nor is it used. clearly you've never worked at one of the companies in question lol. when you're on-call you might need to actually access private data. true data sovereignty products are something countries in the EU are wanting USA companies to implement though, so then it's simply inaccessible, not public or private. the industry is moving in this direction with things like AWS Outposts
- fartcannon 4y agoGoogle needs to spend more on PR I think.
- filoleg 4y ago> when you're on-call you might need to actually access private data. When I was on-call and had to dive deep to solve customers' issues at one of those companies, we could only access anonymized data stripped of all PII (including emails and even IP addresses), to the point where the only non-scrambled things we could get were timestamps and error stacktraces/executed commands (which were also stripped of all PII, which made debugging a bit more difficult). And every instance of access to that anonymized no-PII data required a physical authenticator, and it would automatically send an email to your manager (and some mailing group, i forgot) and create a special log that indicated "such and such was trying to access this anonymized ABC data for XYZ stated purpose".
- willcipriano 4y agoThe terms and conditions almost certainly bind you to arbitration so no class action.
- andrewnicolalde 4y agoWhat about Europe?
- Datenstrom 4y agoI'd be shocked if they weren't, it seems like a totally standard big corp playbook move. It would be the same exact thing Amazon was doing with their independent seller data[1]. [1]: https://www.wsj.com/articles/amazon-scooped-up-data-from-its-own-sellers-to-launch-competing-products-11587650015 https://www.wsj.com/articles/amazon-scooped-up-data-from-its...
- endisneigh 4y agothat's not the same thing, since it's public info.
- deleted 4y ago[deleted]
- Spooky23 4y agoThey’d need to be very careful in doing so, as they both operate services that are certified and audited to meet US Gov FedRAMP High control standards, and doing that would violate several audited control standards. A breach in that area would cost them potentially billions in losses.
- onesmalldrop 4y agoPublic clouds are separated from their gov versions, with gov versions using older, modified versions of what everyone else uses. public clouds ARE NOT fedramp compliant
- Spooky23 4y agoNot necessarily. Lots and lots of .gov operates in commercial clouds. Google doesn’t even have a distinct offering - just support add-ons for things like CJIS compliance. Microsoft’s footprint is a lot more complex. Outside of the DoD space, the main distinctions between these offerings is where data can be stored and where and to what level of vetting vendor employees are.
- rrdharan 4y agoThis is not true. Google Cloud ‘s FedRAMP offering uses the same regions, zones and binaries and configurations as the regular public cloud offering. Source: I work on FedRAMP compliance for GCP Databases.
- my123 4y agoFor reference, this is also the same case for AWS: https://aws.amazon.com/compliance/services-in-scope/ https://aws.amazon.com/compliance/services-in-scope/ AWS US East-West (Northern Virginia, Ohio, Oregon, Northern California) is FedRAMP compliant at moderate impact level.
- deleted 4y ago[deleted]
- Terry_Roll 4y agoGet real, you obviously dont know how organised crime works.
- endisneigh 4y agoYou have proof of these incredible claims - seems crazy to think Google/Microsoft are stealing private data? I know some folks at the NYT if you can provide credible evidence.
- fartcannon 4y agoWho do you know at NYT?
- bee_rider 4y agoI know someone who knows some folks there (nobody well known, just professional contacts in IT). But I don't think it actually is all that useful (or impressive, six degrees to Kevin Bacon, right?) anyway, if somebody has actual credible tips that could lead to a big story, they should just go to https://www.nytimes.com/tips https://www.nytimes.com/tips and contact them through Signal or whatever.
- Terry_Roll 4y agoI'm sure you have heard the phrase, "accidents happen"? You need to stop having the wool pulled over your eyes, its so naive.
- bee_rider 4y agoGood point -- I should stop being so naive and put more faith in the conspiracy theories of strangers from the internet.
- Terry_Roll 4y agoA valid debating technique is to introduce doubt. Cognitive Dissonance is a powerful psychological tool. Read this and learn! The Gentleperson's Guide To Forum Spies (spooks, feds, etc.) https://cryptome.org/2012/07/gent-forum-spies.htm https://cryptome.org/2012/07/gent-forum-spies.htm
- fartcannon 4y agoI'd rather just warn everyone not to use their spyware.
- amusedcyclist 4y agoYour ideas aren't worth that much to be honest