General Discussion
Related: Editorials & Other Articles, Issue Forums, Alliance Forums, Region ForumsClouds are insane

I think cloud computing is a giant mistake. The companies putting my data in their clouds cannot be trusted to keep it safe. And with essentially no consequences of failure, they just keep doing it over and over and over again.
Every day brings news of another data compromise. And the one from today is massive:
https://arstechnica.com/security/2026/06/massive-breach-spills-credentials-for-thousands-of-sensitive-networks/
Massive breach spills credentials for thousands of sensitive networks
The affected include Oracle, Lenovo, FedEx, a NATO contractor, and Fortinet.
Nearly 74,000 Fortinet devices from more than 21,000 IP addresses in 194 countries have been compromised and their plaintext credentials exposed online...
What's Fortinet? From Wikipedia:
So 74,000 devices designed to secure companies from the net have actually been a gateway into compromising those companies.
Oh, and how was this discovered? Not until this guy broke into the bad guy's computer:
The cloud is just somebody else's computer, and they're incompetent idiots.
And no, AI isn't a magic bullet. The solution is to make companies liable for data breaches. They are trusted caretakers of your information and they won't ever be secure until there are consequences that are more expensive than a day-long media blip.
[Thanks for letting me vent, you can put me on ignore now!]
usonian
(27,032 posts)Even open source provider Canonical is addressing the new and vastly expanded threats, thanks to Mythos (AI)
https://ubuntu.com//blog/responding-to-a-new-threat-landscape
They're having to use AI to combat the new AI threats.
Tasmanian Devil
(270 posts)And going after certificates is a boon to deploying malware in commonly used open-source software. Every company that does CI/CD without seriously checking their dependencies is at risk.
Instead of standing on the shoulders of giants, companies are going to have to start treating software they didn't write as a vulnerability.
Kid Berwyn
(25,423 posts)His Oracle went from CIA to corporate global like that.
momta
(4,202 posts)Intractable
(2,544 posts)I back up my files solely to local hard drives.
A few years ago, when the well-known "last pass" was breached, I said, "That's it! No more. The cloud cannot be secured."
Notice how Google and Microsoft are always trying to trick users into using cloud storage. They want your stuff!
Tasmanian Devil
(270 posts)I will create encrypted disk images and copy those to the cloud for a backup. But I don't depend on any one of them to be there tomorrow and I certainly don't upload anything sensitive unencrypted.
For the many of you who think I'm silly, read up on Megaupload and the innocents that lost their files when the service was shut down: https://en.wikipedia.org/wiki/Megaupload
In other words: don't trust the clouds and if your data is in only one place, its not backed up!
I find it amazing that companies will use gmail and google docs to store seriously confidential information, unencrypted on the Google servers. If I was a hacker working for profit or the Russians, my goal would be to work for Google (or Amazon or Microsoft or Apple) to gain admin access to their clouds.
GenThePerservering
(4,017 posts)Exactly. Try explaining that to people that 'the cloud' isn't anything but somebody else's server farm. But oh, no - they think it's some sort of nebulous ur-world where data floats around like molecules. One woman patiently explained to me that "No no...you can just grab something from here...from there..anywhere in The Cloud! It's the future of ecommerce!" (I'm a merchant by trade).
::head desk::
hunter
(40,931 posts)... and operate them outside of their clouds.
ALL the typical consumer crap computers and small business "solutions" are forcing users into the cloud.
The cost of building highly capable machines of our own that do not depend on cloud services is skyrocketing as all the latest technology is sucked up in the construction of new data centers. Anyone who is buying high end components to build their own computers will tell you that.
Are we tacitly giving up the right to run our own computers as we see fit independent of any "cloud?"
Why does everything have to be attached to the internet?