4 ms·

Actually in our case, it's for compliance and confidence purposes and hatred of American politics and government policy, not the American people. Not one singl

Actually in our case, it's for compliance and confidence purposes and hatred of American politics and government policy, not the American people. Not one single company in the financial sector in the UK wants their kit anywhere near the US or in any datacentres with US ownership any more simply because of the PATRIOT act and PRISM etc. We just moved 2 tonnes of kit into a wholly UK owned DC away from two large primarily US based DC's. We've also cancelled our Amazon S3 storage option and migrated over 540Gb of data back to our kit. People have paid for all this voluntarily because being responsble for being fucked over by the US government is a big concern. Would you want all your mortgage, insurance and credit scoring data in the hands of a foreign government who religiously ignore data protection laws?

liljimmytables 13y ago
This is certainly the case for businesses with proprietary data, for an open-source community like we're discussing it's just another (admittedly rather useless) online backup service :)
- harrytuttle 13y ago
  Until someone things it's ok to meddle with your infrastructure and codebase without a warrant...
  - bdunbar 13y ago
    If you think only the US is capable of these kind of shenanigans you have another think coming.
    - koralatov 13y ago
      I don't think anyone is labouring under the illusion that only the U.S. is capable of that sort of thing, but they have been very clearly proven to be doing so already. There's a huge difference between `could do' and `already known to do'.
shin_lao 13y ago
Not one single company in the financial sector in the UK wants their kit anywhere near the US or in any datacentres with US ownership any more simply because of the PATRIOT act and PRISM etc. It's odd because it seems that the British government and the USA have a sharing agreement (from what I understand of the PRISM story, which I don't follow a lot, I admit) which doesn't make it any safer to move hosting from the US to the UK. Also, we happen to have many customers in the finance industry, including in the UK, and I never heard a single one of them telling me they're moving their servers from the US because of politics (or any other reason for that matter). It would even be impossible for most of them as they have office in NYC and need to have IT there. Would you want all your mortgage, insurance and credit scoring data in the hands of a foreign government who religiously ignore data protection laws? Actually I'm more worried about credit companies and banks who also ignore the laws and share this data. I think it's a bigger problem.
- harrytuttle 13y ago
  We still require a warrant in the UK which is the major issue. In the US this is probably still required but is by fact not honoured. The data centre we have moved to has financial guarantees that they won't let anyone in without a warrant and will inform us if anyone issues one immediately. The datacentre also don't have access to our cages (they are locked) so only forced entry is possible which requires a warrant issued. Also we can drop the SAN fabric encryption keys remotely or on network events (such as peer disconnection) which will warrant the cluster useless until someone physically reloads the keys off the KMS. This all puts the onus on the authorities to prove access is warranted and necessary. This is what our clients want. You are saying "including the UK". We deal with ONLY wholly UK based companies as we are very specialist. Credit companies and banks in the UK do not share this data voluntarily. Sometimes there are leaks and cock ups but they are surprisingly rare. The worst people for data leaks are utility companies.
  - Avshalom 13y ago
    The NSA does not require a warrant to spy on you in the UK and has pretty much been doing it since their inception.

liljimmytables 13y ago

This is certainly the case for businesses with proprietary data, for an open-source community like we're discussing it's just another (admittedly rather useless) online backup service :)

harrytuttle 13y ago
Until someone things it's ok to meddle with your infrastructure and codebase without a warrant...
- bdunbar 13y ago
  If you think only the US is capable of these kind of shenanigans you have another think coming.
  - koralatov 13y ago
    I don't think anyone is labouring under the illusion that only the U.S. is capable of that sort of thing, but they have been very clearly proven to be doing so already. There's a huge difference between `could do' and `already known to do'.

shin_lao 13y ago

Not one single company in the financial sector in the UK wants their kit anywhere near the US or in any datacentres with US ownership any more simply because of the PATRIOT act and PRISM etc. It's odd because it seems that the British government and the USA have a sharing agreement (from what I understand of the PRISM story, which I don't follow a lot, I admit) which doesn't make it any safer to move hosting from the US to the UK. Also, we happen to have many customers in the finance industry, including in the UK, and I never heard a single one of them telling me they're moving their servers from the US because of politics (or any other reason for that matter). It would even be impossible for most of them as they have office in NYC and need to have IT there. Would you want all your mortgage, insurance and credit scoring data in the hands of a foreign government who religiously ignore data protection laws? Actually I'm more worried about credit companies and banks who also ignore the laws and share this data. I think it's a bigger problem.

harrytuttle 13y ago
We still require a warrant in the UK which is the major issue. In the US this is probably still required but is by fact not honoured. The data centre we have moved to has financial guarantees that they won't let anyone in without a warrant and will inform us if anyone issues one immediately. The datacentre also don't have access to our cages (they are locked) so only forced entry is possible which requires a warrant issued. Also we can drop the SAN fabric encryption keys remotely or on network events (such as peer disconnection) which will warrant the cluster useless until someone physically reloads the keys off the KMS. This all puts the onus on the authorities to prove access is warranted and necessary. This is what our clients want. You are saying "including the UK". We deal with ONLY wholly UK based companies as we are very specialist. Credit companies and banks in the UK do not share this data voluntarily. Sometimes there are leaks and cock ups but they are surprisingly rare. The worst people for data leaks are utility companies.
- Avshalom 13y ago
  The NSA does not require a warrant to spy on you in the UK and has pretty much been doing it since their inception.