on losing everything to "the cloud"
Dec. 9th, 2010 08:47 amThe Risks of Cloud: Lessons from Wikileaks - Simon Says...:
I commented on Friday about the weakness that responses to Wikileaks have exposed in cloud computing, whatever your view of Wikileaks itself. While there are strong incentives to host critical infrastructure in the cloud or using web services, we saw last week both Amazon Web Services and PayPal - flagship brands in cloud computing and web commercial services respectively - suddenly toss customers off their services without judicial review, useful explanation or workable recourse. I'm sure they breached none of their own (voluminous) agreements. We saw other, less well-known companies (Tableau, EveryDNS) follow suit too, and even a Swiss bank finding a handy loophole. We also saw the US Department of Homeland Security start to seize domain names - this time at least by sending a court order to Verisign, albeit sealed, but without useful explanation or workable recourse. I sense we will see more of this happening.The British have also started a campaign of "stealing" domain names by cutting them off at the DNS registrar, though ostensibly for "copyright violation". The possible validity of the reasoning doesn't change the dangerous nature of the precedent.
This demonstrates the fundamental flaw in web-mediated services. While the Internet itself may have a high immunity to attacks, a monoculture hosted on it does not. We might be able to survive a technical outage, but a political outage or a full-fledged termination of service are likely to put a company that's relied on the cloud for critical infrastructure out of business. Beware those Terms of Service.
[...]
The problem is that we have a society with the governments that it deserves, ready to encourage summary judgement rather than consider matters deeply. The only protection we can even hope to trust today is to take contractual measures and to be ready to self-host in the age of the digital lynch-mob.