|
Sander Rossel wrote: I don't think security has to be an issue in the cloud.
These are gov issues - security means something else there...
"The only place where Success comes before Work is in the dictionary." Vidal Sassoon, 1928 - 2012
|
|
|
|
|
Yes, a lot of hot air 
What Government Organizations Can Learn From The Private Sector About Cybersecurity[^]
Seriously, I worked for a (semi-)government company who had a so-called DMZ and only a few people were able to access the production servers, USB was forbidden, etc.
I was lured in with stories about cloud migrations and software modernization, but once I was in I discovered cloud was a no-go because management didn't think it was secure.
Meanwhile, all passwords were stored in config files and committed to source control 
I get it though, their policies are secure, but ultimately it's only as secure as the weakest link 
Like the IT manager at a very large international enterprise whose products are in all our houses who opened some ransomware email on a server 
Management can't say "you can't store passwords in config files" because that's so low level they don't even know it's happening.
They can say "you cannot open ransomware email", but if even their IT manager doesn't recognize them you're pretty screwed either way.
|
|
|
|
|
Government has no incentive to learn from the private sector, because those running it have no skin in the game. They seldom answer to anyone, have few budgetary constraints, and rely on violence to keep their "customers".
|
|
|
|
|
Yeah, it's not like they have competition.
You are legally obliged to file your taxes at the website of your one and only tax authority.
Our tax authority used to have a slogan, freely translated "we can't make it any easier, but we can make it more fun."
They failed at both, but how the hell can't they make it easier!?
How about you give us a clear and responsive website without so much jargon so I know what I have to enter where? 
They're now going to force companies to use some paid third-party login service.
It didn't work on someone I know's phone, so she never was able to login and so she never paid (after many emails, of course, that just said she had to restart her phone).
They went as far as to send a debt collector, but she was ultimately in the right.
It sure as hell doesn't count as "easy" or "fun" (well, it may be fun to send the debt collector back and get your right anyway) 
What's more absurd is that you now have to pay to file taxes that you are obliged to do!?
Making it easier should be easier than making it fun 
And that's just one government example, but probably the worst.
|
|
|
|
|
Sander Rossel wrote: People act like everything will always go wrong on the cloud and everything always goes right on-premises, but the truth is outages happen on-premises too and the cloud can have really high uptime just as well.
No, I (at least I) act against, the cloud is wonderful and a "no-brainer"
It has advantages and disadvantages as everything.
It might be the best solution, but it doesn't have to be it.
For some things will be the only logical solution, but for others should not even be considered.
I can understand your plus points, but it looks like you have been lucky enough in your life to not see the negative sides that some more experienced (and I mean it from the point of view "more years in the field", nothing to do with "better professional than you") are more cautious about.
M.D.V. 
If something has a solution... Why do we have to worry about?. If it has no solution... For what reason do we have to worry about?
Help me to understand what I'm saying, and I'll explain it better to you
Rating helpful answers is nice, but saying thanks can be even nicer.
|
|
|
|
|
With U.S. economic sanctions on Venezuela taking effect, Adobe discontinued its Creative Cloud (CC) subscription service in the country, stranding thousands of creators without their creative apps. They were customers, paying their bills in time, but ooopss... from one moment to the other.... bye bye
Looks like 3 or 4 weeks later was solved again (https://apnews.com/da3fd7a122124cd5af88400cd2338753[^]), I can give you that... but what if not? Or if not 100% the same as before the cut?
That can happens every day and you won't probably have enough time to react.
So...
is the web / app, a not critical nice to have? Can be in the cloud.
Is the web / app, my only way of earning my money? Over my dead corpse to the cloud.
M.D.V.
If something has a solution... Why do we have to worry about?. If it has no solution... For what reason do we have to worry about?
Help me to understand what I'm saying, and I'll explain it better to you
Rating helpful answers is nice, but saying thanks can be even nicer.
modified 19-May-20 5:38am.
|
|
|
|
|
Didn't something similar happen to Huawei?
Trump is wrecking economies and businesses all over the world, including American ones that got their stuff from China.
Could happen to anyone.
But let's for a moment think about using Azure.
And for some reason Microsoft isn't allowed to do business in your country anymore.
YOU'RE SCREWED EITHER WAY!
The chances of that happening to Azure, AWS or GC in Europe are really small though.
But say you have everything on-premises and now COVID-19 happens.
With the cloud I can access everything from home without any additional effort.
So yeah, in really far-fetched doom scenario's one may take precedence over the other.
In any case, if that really did happen, I still have all my source code (oh, but GitHub and Azure DevOps are Microsoft too, so I lost that too).
Luckily I have local copies 
I'll have to find a server real quick and install everything (a bootleg version of Windows, obviously, since Microsoft is a no-go now), but I'll hopefully manage.
Not without serious downtime, obviously, but such a tiny risk far outweighs the costs and efforts.
My point is, we can all start panicking if Microsoft is banned from our country.
|
|
|
|
|
Sander Rossel wrote: The chances of that happening to Azure, AWS or GC in Europe are really small though.
...
My point is, we can all start panicking if Microsoft is banned from our country.
I am not panicking on Microsoft being banned of Europe.
I just don't consider the possibility of XXX-Cloud-Provider being forced or being hacked to pull the plug / activate a *.* firewall / whatever it is needed to cut the services for a concrete country / group of countries that "really small though".
To give a better reply to that I would open the possibility in fast Soapbox degeneration and I don't want to do it.
M.D.V.
If something has a solution... Why do we have to worry about?. If it has no solution... For what reason do we have to worry about?
Help me to understand what I'm saying, and I'll explain it better to you
Rating helpful answers is nice, but saying thanks can be even nicer.
modified 19-May-20 6:15am.
|
|
|
|
|
Let's put it this way, the sure thing for Microsoft to lose business is to cut off all their customers or be unavailable.
So they'll be really careful about that.
|
|
|
|
|
It depends on (a) the required level of reliability, (b) the required security, and (c) the required disaster recovery plan.
The cloud (as provided by Microsoft/Google/Amazon or other large players) is pretty good as far as reliability is concerned. Where it falls down IMO is on security - if the data are not on your server, you don't own them.
As for disaster recovery, any DR scheme is useless once you tailor your application to a specific provider. While it is unlikely that MS /Google/Amazon will go bankrupt or be banned from operating in your country, a good DR plan should take these contingencies into account.
Freedom is the freedom to say that two plus two make four. If that is granted, all else follows.
-- 6079 Smith W.
|
|
|
|
|
Daniel Pfeffer wrote: Where it falls down IMO is on security - if the data are not on your server, you don't own them.
I don't think that's true?
Cloud providers just provide you with storage capability.
I guess they could access it if they wanted to, although they won't know your password (I hope).
At least I always make sure my data stays in Europe, preferably Amsterdam, because of GDPR.
The USA is a no-go due to privacy concerns.
But I don't think they actually own your data and it may even be illegal for them to use it.
It's a bit of a grey area though, like when the USA said "if you're a US company the US has the right to view your data no matter where in the world it's stored."
But that comes with international companies I guess.
Azure has pretty good disaster recovery capabilities.
You can backup to your on-premises servers or keep it in Azure in other regions or continents.
For example, Amsterdam and Dublin, or Amsterdam and New York.
Daniel Pfeffer wrote: a good DR plan should take these contingencies into account.
I guess that's a cost/risk descision.
If the costs for planning something like that are millions and the chances of it happening are minuscule it may not be worth it.
You'll probably have other issues too, like Windows not getting security updates anymore, but your ASP.NET application being unable to run on anything else but Windows.
You may be able to run it for a while, but having to rewrite everything could mean the end of your company just as well.
|
|
|
|
|
With EU GDPR it may become quite unsafe relying on cloud vendors because they are not the Controllers or Processors of data treatment and if they don't have the main registered office in the EU they are unbound by GDPR laws - their EU customers are not, and a court of law can easily rule that using a particular or any cloud providers is not "adequate protection". And the chances of this happening depend entirely on politics.
This could have a massive effect on the usage of cloud services, given the impossibility of actuating the mandated periodical security audits, impossibility of actually knowing if the internal management of data is GDPR compliant and impossibility of knowing the true position of the data service.
Or, on the contrary, it can become the easiest and cheapest way for EU companies to cheat around most of the GDPR.
GCS d--(d+) s-/++ a C++++ U+++ P- L+@ E-- W++ N+ o+ K- w+++ O? M-- V? PS+ PE- Y+ PGP t+ 5? X R+++ tv-- b+(+++) DI+++ D++ G e++ h--- r+++ y+++* Weapons extension: ma- k++ F+2 X
|
|
|
|
|
I have always been a Microsoft developer and currently most everything I do is in Azure.
Social Media - A platform that makes it easier for the crazies to find each other.
Everyone is born right handed. Only the strongest overcome it.
Fight for left-handed rights and hand equality.
|
|
|
|
|
My company learned the "hard way" to provide some own cloud services. Mostly to use AWS resources.
Press F1 for help or google it.
Greetings from Germany
|
|
|
|
|
You don't hardcode against a provider, you make an abstraction layer
Bastard Programmer from Hell 
If you can't read my code, try converting it here[^]
"If you just follow the bacon Eddy, wherever it leads you, then you won't have to think about politics." -- Some Bell.
|
|
|
|
|
Not me and it ain't gonna happen. We are more likely to make our own than to rent one.
"They have a consciousness, they have a life, they have a soul! Damn you! Let the rabbits wear glasses! Save our brothers! Can I get an amen?"
|
|
|
|
|
The products I develop can not be implemented in the 'cloud'.
[insert pregnant pause here while I wait for questions]
Software Zen: delete this;
|
|
|
|
|
I just do not see it as an either/or situation, whether for an app or for data storage, desktop app or cross-platform app. I offer clients options of cloud providers or on-site servers. 99% of the code is the same, with modules to connect to various cloud services or to an on-site server. The read/write module for data I/O is selected by a state variable for the particular project. I can set up the local server or configure for cloud service. In any case I encrypt the data and back it up elsewhere. You end up with situations like China does not allow anything from Google, so it is Microsoft cloud services or local server. Some clients like Google platform. I can advise but do not make the final decision. At the end of the day it is a customer preference.
|
|
|
|
|
Reports from all directions (4)
|
|
|
|
|
|
yep 
|
|
|
|
|
Have a look at NthDimension Github repo for my C# OpenGL 3.0 deferred rendering framework.
The codebase has grown quite a lot. It could use a few contributors.
|
|
|
|
|
I love graphics. As soon as I get the door refinished (contractor fail), the roof replaced (hail), the deck re-done (on me), the kitchen renovated, 3 bathrooms tidied up, and the master bath/bedroom overhauled, I'll get back to you.
Just bury me in the backyard.
Charlie Gilley
<italic>Stuck in a dysfunctional matrix from which I must escape...
"Where liberty dwells, there is my country." B. Franklin, 1783
“They who can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety.” BF, 1759
|
|
|
|
|
Hahaha, it's a deal. Saved a spot for you. 
|
|
|
|
|
The heat death of the universe and you are obviously in a race.
I think you're winning.
Software Zen: delete this;
|
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
