5 ms·
Well its called managed infrastructure for a reason.
by pgo 6y ago
Well its called managed infrastructure for a reason.
- zaarn 6y agoEven in managed infrastructure, taking data out of the infrastructure is unacceptable.
- londons_explore 6y agoI don't think there is a good solution yet for products like cloud SQL to make it theoretically impossible for an evil hosting company to steal your data. But it should be possible for a client to audit all accesses, and the audit logging system be robust enough to catch evil employees.
- icedchai 6y agoWho audits the audit system? If I'm an evil employee I'll make sure my requests don't show up there.
- joshuamorton 6y agoSo a company goes to the effort of creating an audit system, but gives everyone the ability to modify the history? If your threat model is a single rogue employee, auditing systems address the issues. If your threat model is "the whole company works against you", you probably shouldn't be using any company to host your infra, so host it yourself, because there's no way to be secure in that situation.
- zaarn 6y agoI doesn't have to be impossible to access but the hoster shouldn't just log into my system and download arbitrary data from it. I'm not asking for perfect confidentiality, just contractual confidentiality.