- Site menu:
- Latest Discussions
- Latest Newswire
- Archives
- Submit Story
- Story HOWTO
- Syndicate
- E-mail Alerts
Cloud security: We're asking the wrong questions
|
|
|
Comments (9)
Most irresponsible article I've read in a long time
What can I say but seconded?
This article was clearly sponsored by the NSA...
Your tax dollars at work.
Wait Bob, you mean now NSA also has access to foreign tax dollars?
> Wait Bob, you mean now NSA also has access to foreign tax dollars?
Via sales of military hardware to our allies? Certainly.
Via sales of military hardware to our allies? Certainly.
The IRSs arm has grown long.
Nice attitude.
"Security doesn't sell solutions -- features and pricing do. Features are cheaper in the cloud."
So is the author's thinking that nobody cares about the security of their information so long as it's stored somewhere that's cheaper? That you must be some sort of Luddite if you're not enthusiastically shoving all your private information onto the cloud? Really? Because "features"? Wow. I'm going to be switching my physician should I find that they're considering abandoned their paper files and putting everything onto the cloud. We should all be thinking long and hard about proposals for using cloud-based storage for any information that covered by HIPAA or any other laws that are in place to protect personal information.
Cloud fanbois are quick to point out that your data WILL be protected -- it's all right there in the contract. Of course, when it's NOT protected, you may not be told about the breach that exposed your data for months (if ever; the breach could be by our own government who's slapped a gag order on the provider) and that you'll have to engage in an obscenely expensive lawsuit against the cloud provider to recover damages. All while you're being sued by your customers for having used a cloud provider who didn't take the security of their data as seriously as their marketing brochure promised. I doubt that claiming "nobody said the cloud was going to be secure" is going to fly in court. Security will become a selling point once some company's use of the cloud results in private information being released and the dust settles after the multi-million dollar lawsuits.
All that said... I still think there's a place for clouds: in your own data center where they can simplify in-house storage. Heck, I'm considering moving to (a small) one at home... depending on the size of the next bonus.
So is the author's thinking that nobody cares about the security of their information so long as it's stored somewhere that's cheaper? That you must be some sort of Luddite if you're not enthusiastically shoving all your private information onto the cloud? Really? Because "features"? Wow. I'm going to be switching my physician should I find that they're considering abandoned their paper files and putting everything onto the cloud. We should all be thinking long and hard about proposals for using cloud-based storage for any information that covered by HIPAA or any other laws that are in place to protect personal information.
Cloud fanbois are quick to point out that your data WILL be protected -- it's all right there in the contract. Of course, when it's NOT protected, you may not be told about the breach that exposed your data for months (if ever; the breach could be by our own government who's slapped a gag order on the provider) and that you'll have to engage in an obscenely expensive lawsuit against the cloud provider to recover damages. All while you're being sued by your customers for having used a cloud provider who didn't take the security of their data as seriously as their marketing brochure promised. I doubt that claiming "nobody said the cloud was going to be secure" is going to fly in court. Security will become a selling point once some company's use of the cloud results in private information being released and the dust settles after the multi-million dollar lawsuits.
All that said... I still think there's a place for clouds: in your own data center where they can simplify in-house storage. Heck, I'm considering moving to (a small) one at home... depending on the size of the next bonus.
I have no problem storing data in the "cloud", so long as that data is encrypted, locally, by me, first.
Find, learn, and use, GnuPG.
Find, learn, and use, GnuPG.
Post a comment
A free account is needed to post. Write your comment here first: your text is kept in this browser while you sign up or log in, and is waiting for you when you come back.
Your message:Markdown: **bold**, *italic*, [text](https://link), - lists, > quotes, $x^2$ for math. Formatting help
Sign up and post (it is free) or Log in and post
Strange to see this kind of irresponsible journalists haven't been chased out of town, covered in tar and feathers. True, nobody worries about security until the poo hits the fan. And then these idiots are hired to lure everybody to sleep again??
Does anyone have naked pics of this guy to link his article to?