3 ms·
> You can encrypt your data with your own key with trivial effort on all the major cloud providers. Believing that this actually protects you from the provider
by Nextgrid 3y ago
> You can encrypt your data with your own key with trivial effort on all the major cloud providers.
Believing that this actually protects you from the provider is wishful thinking. What keeps them honest is that it's mostly not worth it for them to mine cloud customer data, but if they wanted to they absolutely could.
- jruohonen 3y ago> Believing that this actually protects you from the provider is wishful thinking. Indeed. Besides, there is a whole genre of research and practice on the introspection of virtual machines.
- dangus 3y agoThis actually isn’t at all relevant to what I’m talking about. I’m talking about who holds responsibility for the actions taken with the virtual machines that Microsoft sells. If I buy a VM from Microsoft and run a scam on it, Microsoft didn’t have control of that action. They don’t make my scam website or sell the data I collected. I’m the one responsible for scamming people, not Microsoft. We can go down the hypothetical rabbit holes on whether Microsoft is running an incredibly sophisticated operation to memory dump all their customers’ VMs to try and steal data, but that’s basically beside the point.