Welcome to DU! The truly grassroots left-of-center political community where regular people, not algorithms, drive the discussions and set the standards. Join the community: Create a free account Support DU (and get rid of ads!): Become a Star Member Latest Breaking News Editorials & Other Articles General Discussion The DU Lounge All Forums Issue Forums Culture Forums Alliance Forums Region Forums Support Forums Help & Search

Tasmanian Devil

(270 posts)
Wed Jun 17, 2026, 08:09 PM Wednesday

Clouds are insane



I think cloud computing is a giant mistake. The companies putting my data in their clouds cannot be trusted to keep it safe. And with essentially no consequences of failure, they just keep doing it over and over and over again.

Every day brings news of another data compromise. And the one from today is massive:

https://arstechnica.com/security/2026/06/massive-breach-spills-credentials-for-thousands-of-sensitive-networks/
Massive breach spills credentials for thousands of sensitive networks
The affected include Oracle, Lenovo, FedEx, a NATO contractor, and Fortinet.

Researchers have uncovered a massive breach of Fortinet firewalls that has given Russian-speaking attackers near-unrestricted access to some of the world’s largest and most powerful organizations, including Oracle, Chevron, Lenovo, Federal Express, a NATO defense contractor, and Fortinet itself.

Nearly 74,000 Fortinet devices from more than 21,000 IP addresses in 194 countries have been compromised and their plaintext credentials exposed online...


What's Fortinet? From Wikipedia:
Fortinet, Inc. is an American cybersecurity company headquartered in Sunnyvale, California. It develops and sells security products including firewalls, endpoint security and intrusion detection systems.


So 74,000 devices designed to secure companies from the net have actually been a gateway into compromising those companies.

Oh, and how was this discovered? Not until this guy broke into the bad guy's computer:
Bob Diachenko, a security researcher and head of SecurityDiscovery.com, said online and in an interview. He said he found the data after gaining access to the attackers’ command-and-control server and other infrastructure.


The cloud is just somebody else's computer, and they're incompetent idiots.

And no, AI isn't a magic bullet. The solution is to make companies liable for data breaches. They are trusted caretakers of your information and they won't ever be secure until there are consequences that are more expensive than a day-long media blip.

[Thanks for letting me vent, you can put me on ignore now!]
8 replies = new reply since forum marked as read
Highlight: NoneDon't highlight anything 5 newestHighlight 5 most recent replies
Clouds are insane (Original Post) Tasmanian Devil Wednesday OP
Breaches are not a matter if "whether" but "when" usonian Wednesday #1
Supply chain Tasmanian Devil Wednesday #2
Larry Ellison knows what's going on. Kid Berwyn Wednesday #3
K&R momta Wednesday #4
As best I can, I store nothing in the cloud. Intractable Wednesday #5
Good! Tasmanian Devil Thursday #6
"The cloud is just somebody else's computer, and they're incompetent idiots." GenThePerservering Thursday #7
The tech bros are making it difficult for us to buy our own fully capable computers... hunter Thursday #8

usonian

(27,032 posts)
1. Breaches are not a matter if "whether" but "when"
Wed Jun 17, 2026, 08:21 PM
Wednesday

Even open source provider Canonical is addressing the new and vastly expanded threats, thanks to Mythos (AI)

https://ubuntu.com//blog/responding-to-a-new-threat-landscape

They're having to use AI to combat the new AI threats.



Tasmanian Devil

(270 posts)
2. Supply chain
Wed Jun 17, 2026, 08:30 PM
Wednesday

And going after certificates is a boon to deploying malware in commonly used open-source software. Every company that does CI/CD without seriously checking their dependencies is at risk.

Instead of standing on the shoulders of giants, companies are going to have to start treating software they didn't write as a vulnerability.

Kid Berwyn

(25,423 posts)
3. Larry Ellison knows what's going on.
Wed Jun 17, 2026, 08:44 PM
Wednesday

“His” Oracle went from CIA to corporate global like that.

Intractable

(2,544 posts)
5. As best I can, I store nothing in the cloud.
Wed Jun 17, 2026, 11:41 PM
Wednesday

I back up my files solely to local hard drives.

A few years ago, when the well-known "last pass" was breached, I said, "That's it! No more. The cloud cannot be secured."

Notice how Google and Microsoft are always trying to trick users into using cloud storage. They want your stuff!

Tasmanian Devil

(270 posts)
6. Good!
Thu Jun 18, 2026, 12:04 AM
Thursday

I will create encrypted disk images and copy those to the cloud for a backup. But I don't depend on any one of them to be there tomorrow and I certainly don't upload anything sensitive unencrypted.

For the many of you who think I'm silly, read up on Megaupload and the innocents that lost their files when the service was shut down: https://en.wikipedia.org/wiki/Megaupload

In other words: don't trust the clouds and if your data is in only one place, it’s not backed up!

I find it amazing that companies will use gmail and google docs to store seriously confidential information, unencrypted on the Google servers. If I was a hacker working for profit or the Russians, my goal would be to work for Google (or Amazon or Microsoft or Apple) to gain admin access to their clouds.

GenThePerservering

(4,017 posts)
7. "The cloud is just somebody else's computer, and they're incompetent idiots."
Thu Jun 18, 2026, 12:32 AM
Thursday

Exactly. Try explaining that to people that 'the cloud' isn't anything but somebody else's server farm. But oh, no - they think it's some sort of nebulous ur-world where data floats around like molecules. One woman patiently explained to me that "No no...you can just grab something from here...from there..anywhere in The Cloud! It's the future of ecommerce!" (I'm a merchant by trade).

::head desk::

hunter

(40,931 posts)
8. The tech bros are making it difficult for us to buy our own fully capable computers...
Thu Jun 18, 2026, 03:10 AM
Thursday

... and operate them outside of their clouds.

ALL the typical consumer crap computers and small business "solutions" are forcing users into the cloud.

The cost of building highly capable machines of our own that do not depend on cloud services is skyrocketing as all the latest technology is sucked up in the construction of new data centers. Anyone who is buying high end components to build their own computers will tell you that.

Are we tacitly giving up the right to run our own computers as we see fit independent of any "cloud?"

Why does everything have to be attached to the internet?

Latest Discussions»General Discussion»Clouds are insane