3 ms·
What's interesting is that there is a whole ecosystem of companies like CipherCloud that do the minimum required to provide solutions for those interested in "c
by moxie 14y ago
What's interesting is that there is a whole ecosystem of companies like CipherCloud that do the minimum required to provide solutions for those interested in "compliance," not "security."
My sense has been that their customers are predominately those bound by things like HIPPA or PCI, who want to use cloud services, but can't do it with a straight face unless they can say they're "encrypting" their data.
What their customers want isn't security; it's the minimum required that will allow them to use salesforce.com. Incriminating details on StackExchange aren't a problem because their customers don't already know CipherCloud is insecure, they're a problem because it would make it harder for customers to say they're in compliance with a straight face.
- DanBC 14y agoIs it really that simple? Or is it that crypto is difficult and buyers have no knowledge and thus are wide open for people selling snake-oil?
- pyre 14y agoIt can be both. There are going to be companies that are serious about actually protecting their customers (but don't have the technical know-how to be an informed customer), and there are companies that see these laws/rules (PCI, HIPPA) as hindrances to cast aside with the least possible effort.
- moxie 14y agoOn some level, the fact that compliance regulations exist is an indication that security is not a priority for many of the entities that it applies to. Certainly snake-oil is a problem, but I think this particular area is one where buyers are most concerned about being able to effectively claim that they made what seemed like reasonable efforts.
- iuguy 14y agoI've mirrored Emil Vokstrom's mirror[1] here[2] and I encourage HNers outside of the US to do the same and post here. [1] - http://lajm.eu/emil/dump/ciphercloud-security.html http://lajm.eu/emil/dump/ciphercloud-security.html [2] - http://securitybookreviews.eu/ciphercloud/ http://securitybookreviews.eu/ciphercloud/
- shared4you 14y agoMirror of Google's webcache, including images: http://bdsatish.in/math/crypto-se-3645/ http://bdsatish.in/math/crypto-se-3645/
- jaytaylor 14y agoI've mirrored everything I can find[0]. [0] http://scala.sh/ciphercloud/ http://scala.sh/ciphercloud/
- daigoba66 14y agoFor reference, it's HIPAA not HIPPA. Common mistake.