Will My Cloud Provider Read My Data?
In my last blog post, I explained how you can verify that Amazon cloud storage is zeroized before being redeployed for the next user. But what about the cloud provider browsing through your data? After all, it’s stored on their hardware in their facility, so they have physical access plus the ability to interact with […]
Who Can Read My Data in the Cloud?
For the sake of your compliance, you hope that the answer is “nobody”! For most organizations, confidentiality is the greatest concern. The most worrying thing about using cloud technology is storing your data on someone else’s hardware. But how big of a risk is this, really? Stored data should be encrypted. However, how much of […]
LinkedIn Accounts May Have Been Hacked
It is a good time to change your LinkedIn password. Lifehacker reports that up to 6.5 million accounts may have been compromised. Just to be safe change your LinkedIn password now. I did. One report at The Verge notes that part of the issue may be the type of hash used. I will discuss these issues in […]
Nothing New Under the Sun (or in the Cloud)
I see a lot of misguided talk about cloud computing and its security as the New Big Thing. I was reminded of this the other evening when the local brewpub hosted a talk by Gene Spafford, the director of Purdue University’s CERIAS, the Center for Education and Research in Information Assurance and Security. Spaf spoke […]