5 ms·
If you are invested on AWS does it really matter? They own the metal your software runs on and they can look at it regardless if you give them the key or not.
by spdy 12y ago
If you are invested on AWS does it really matter?
They own the metal your software runs on and they can look at it regardless if you give them the key or not.
- toomuchtodo 12y agoDevOps here! If they can capture the memory contents of your VM, you've already lost. Get some gear, and colo it in a non-US country if you're paranoid about the NSA.
- general_failure 12y agoAnd don't use US hardware.. Best of luck with that.
- mentat 12y agoThere's GovCloud but not "non-GovCloud".
- toomuchtodo 12y agoSupermicro builds its gear in Taiwan still, no? Has been a while since I had to buy physical hardware.
- lmz 12y agoTaiwan, the country that only exists because the US lets it?
- IgorPartola 12y agoExactly this. I have been looking at things that make self hosting email easier, and lots of them include encrypted file systems. I don't really get why. Once someone has any type of access to a server, you are done for. By its nature cloud hosting means that the provider can read everything from your VPS, including passwords you type into it and keys you store on it, and they can be compelled to do just that. Not saying you should stop using AWS and the like, but I think adding security fences inside your VPS is only giving you diminishing returns.