Comments on: Entering the “Cloud Security” Fray http://danielmiessler.com/blog/entering-the-cloud-security-fray grep understanding Sun, 29 Jan 2012 20:44:46 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: Adam Young http://danielmiessler.com/blog/entering-the-cloud-security-fray/comment-page-1#comment-231414 Adam Young Fri, 21 Nov 2008 21:22:37 +0000 http://dmiessler.com/?p=3906#comment-231414 <p>There is, of course, the multiplicative effect of a compromise in the cloud deployment mechanism. Say they use a VM to deploy on the cloud, and there is an escalation path from the VM out into the cloud hardware, the impact could be large.</p> <p>Maxo probably has the right approach for personal use, but in order for the Cloud approach to be viable, you have to be able to trust it.</p> <p>There is always a risk from a monoculture.</p> There is, of course, the multiplicative effect of a compromise in the cloud deployment mechanism. Say they use a VM to deploy on the cloud, and there is an escalation path from the VM out into the cloud hardware, the impact could be large.

Maxo probably has the right approach for personal use, but in order for the Cloud approach to be viable, you have to be able to trust it.

There is always a risk from a monoculture.

]]> By: Adam Young http://danielmiessler.com/blog/entering-the-cloud-security-fray/comment-page-1#comment-253586 Adam Young Fri, 21 Nov 2008 21:22:00 +0000 http://dmiessler.com/?p=3906#comment-253586 <p>There is, of course, the multiplicative effect of a compromise in the cloud deployment mechanism. Say they use a VM to deploy on the cloud, and there is an escalation path from the VM out into the cloud hardware, the impact could be large.</p> <p>Maxo probably has the right approach for personal use, but in order for the Cloud approach to be viable, you have to be able to trust it.</p> <p>There is always a risk from a monoculture.</p> There is, of course, the multiplicative effect of a compromise in the cloud deployment mechanism. Say they use a VM to deploy on the cloud, and there is an escalation path from the VM out into the cloud hardware, the impact could be large.

Maxo probably has the right approach for personal use, but in order for the Cloud approach to be viable, you have to be able to trust it.

There is always a risk from a monoculture.

]]> By: Maxo http://danielmiessler.com/blog/entering-the-cloud-security-fray/comment-page-1#comment-231373 Maxo Fri, 21 Nov 2008 19:43:26 +0000 http://dmiessler.com/?p=3906#comment-231373 <p>I made a similar argument last week about how the cloud may increase security for the average user. The argument goes like this, the average computer user knows little to nothing about security and is very vulnerable. If their data was on the cloud it would be more secure because it would be in the hands of "experts", for what that is worth. Computer geeks who know how to secure their data properly are probably less secure with their data in the cloud. There are more computer users that will have a security gain by having their data in the cloud than there are that stand to lose. Therefore the net effect of cloud computer may be a net gain for security.</p> <p>For me I put nonsensitive data, like my class work in the cloud (Google Docs) and leave my sensitive information (financial, etc.) on my PC.</p> I made a similar argument last week about how the cloud may increase security for the average user. The argument goes like this, the average computer user knows little to nothing about security and is very vulnerable. If their data was on the cloud it would be more secure because it would be in the hands of “experts”, for what that is worth. Computer geeks who know how to secure their data properly are probably less secure with their data in the cloud. There are more computer users that will have a security gain by having their data in the cloud than there are that stand to lose. Therefore the net effect of cloud computer may be a net gain for security.

For me I put nonsensitive data, like my class work in the cloud (Google Docs) and leave my sensitive information (financial, etc.) on my PC.

]]> By: Maxo http://danielmiessler.com/blog/entering-the-cloud-security-fray/comment-page-1#comment-253585 Maxo Fri, 21 Nov 2008 19:43:00 +0000 http://dmiessler.com/?p=3906#comment-253585 <p>I made a similar argument last week about how the cloud may increase security for the average user. The argument goes like this, the average computer user knows little to nothing about security and is very vulnerable. If their data was on the cloud it would be more secure because it would be in the hands of "experts", for what that is worth. Computer geeks who know how to secure their data properly are probably less secure with their data in the cloud. There are more computer users that will have a security gain by having their data in the cloud than there are that stand to lose. Therefore the net effect of cloud computer may be a net gain for security.</p> <p>For me I put nonsensitive data, like my class work in the cloud (Google Docs) and leave my sensitive information (financial, etc.) on my PC.</p> I made a similar argument last week about how the cloud may increase security for the average user. The argument goes like this, the average computer user knows little to nothing about security and is very vulnerable. If their data was on the cloud it would be more secure because it would be in the hands of “experts”, for what that is worth. Computer geeks who know how to secure their data properly are probably less secure with their data in the cloud. There are more computer users that will have a security gain by having their data in the cloud than there are that stand to lose. Therefore the net effect of cloud computer may be a net gain for security.

For me I put nonsensitive data, like my class work in the cloud (Google Docs) and leave my sensitive information (financial, etc.) on my PC.

]]>