Cloud Computing: The Bad & the Ugly
The concept of “cloud computing” refers to the ability to use applications (usually installed as a program on your computer) on the Internet. Good examples of cloud computing include Google Calendar, Google Docs, Mint, and Internet-based email – Yahoo, Hotmail, Gmail, etc. I’ve been hearing a lot of buzz surrounding cloud computing lately, how this is the future of applications, and how your PC will become obsolete in regards to accessing programs on your desktop (unless you want to take the Internet application “offline” to your computer). However, very few people seem to discuss the dangers of cloud computing.
We already store a lot of information about ourselves online. If you use Internet-based email, PayPal, eBay, perform online banking, or pay your bills online, then your private and financial information is stored in multiple servers all over the world. Considering the rash of data leaks – companies losing backup drives/tapes, laptops, etc. – over the past few years, you have plenty to worry about. Therefore, the idea of cloud computing, which is nothing new, should raise even more red flags. Let’s take a look at an example.
You’re a company and decide to use Google Docs instead of paying expensive licensing fees for Microsoft Office. You write proprietary information about your company, which can include financials, technical specifications for your “super secret” application/service, and private/confidential employee information. As soon as you click the Save button for the first time in Google Docs, Google knows a lot about your company. What controls are in place to stop some unscrupulous employee from going through your documents and stealing your idea or employee information? What controls are in place to stop some ex-employee from accessing these servers remotely using the admin login and password? I can definitely attest that unless your company changes server passwords frequently, nothing can stop this from happening. I know of a company that never changed the passwords to their servers and were, in fact, quite easy to guess. Additionally, every former employee could access the machine if they have the right (hacking) tools. Nothing but a current or former employee’s honor and integrity stops a huge data leak for this particular company. That’s the same thing that we, as consumers, have to depend on when storing and/or using applications and services online. (more…)
