3 ms·
They know who owns the VM, and now they know that you connected, sent & received a certain amount of data at a certain time. [Edit: apparently this is more enc
by sp332 4y ago
They know who owns the VM, and now they know that you connected, sent & received a certain amount of data at a certain time.
[Edit: apparently this is more encrypted than I was thinking, so the next bit is probably wrong.] They could potentially look inside the VM to look at the specific data on the other side of TLS.
- carlivar 4y agoCan anyone provide proof that Google records this (for Google, not as network telemetry for cloud customers)?
- metadat 4y agoGoogle Cloud would be negligent if they didn't collect information about ingress and egress traffic mapped to each of their tenants. Since they own the servers and network, it's on them to be able to investigate and track abuse.
- carlivar 4y agoPerhaps I phrased it poorly. The inference seems to be Google using this data for their gain (beyond operational needs). Is there any proof of that? Or is my inference incorrect?
- cortesoft 4y agoSure, and your ISP knows every single IP you have connected to, too. That is just how the internet works.
- sp332 4y agoThe ISP only knows that the traffic went to GCP. Google knows which customer it went to.
- jeroenhd 4y agoeSNI (or similar) still hasn't been rolled out at large scale. If your ISP wants to, it can know what domain the application is trying to connect to. Domain fronting may confuse them, but most services don't use that at all.
- freeflight 4y ago> They know who owns the VM, and now they know that you connected, sent & received a certain amount of data at a certain time. Which is quite similar to meta data that's collected on phone calls, such data is regularly the basis for governments killing people [0] [0] https://www.justsecurity.org/10311/michael-hayden-kill-people-based-metadata/ https://www.justsecurity.org/10311/michael-hayden-kill-peopl...