News for hackers. Stuff that matters.
Re:Announcing the New AWS Secret Region by jlgaddis on Monday November 20, 2017 @05:17PM (#15743827)
The "Top Secret" cloud is not connected to the Internet.
Re:Announcing the New AWS Secret Region by user5994461 on Monday November 20, 2017 @05:27PM (#15743909)
Which obviously can't be true or it would be inaccessible and thus utterly useless.
Re:Announcing the New AWS Secret Region by jlgaddis on Monday November 20, 2017 @05:32PM (#15743947)
Why? It can still be connected to SIPRnet or JWICS.

Or customers can get a Direct Connect from their existing facilities into the region. I presume the USG has plenty of fiber straight into these new datacenters and I'm not sure why Amazon wouldn't allow Direct Connect.

As someone else mentioned, perhaps this will get contractors to stop using public S3 buckets to share data.

Re:Announcing the New AWS Secret Region by jsjohnst on Monday November 20, 2017 @11:08PM (#15745444)
That’s not “air gapped” if it’s connected to another government network.
Re:Announcing the New AWS Secret Region by jlgaddis on Tuesday November 21, 2017 @12:39AM (#15745881)
It's air-gapped from the Internet.
Re:Announcing the New AWS Secret Region by jsjohnst on Tuesday November 21, 2017 @08:16AM (#15747641)
The term “air gap” does not directly imply anything to do with the Internet (doesn’t exclude it, but it applies more generally than specific networks). Yes, IC uses it to signify high/low networks, but the original usage of the term was to indicate a machine with no direct connection to the outside world. The theory being (since proven wrong), you can’t exfiltrate data remotely from a device not connected to a network.
Re:Announcing the New AWS Secret Region by Gigablah on Tuesday November 21, 2017 @02:08AM (#15746238)
What if it’s submerged in coolant?
Re:Announcing the New AWS Secret Region by dsl on Tuesday November 21, 2017 @01:50AM (#15746168)
JWICS/SIPR/NSAnet/etc. are air gapped in that terminals are not allowed to be dual homed to any other network or to each other.
Re:Announcing the New AWS Secret Region by jsjohnst on Tuesday November 21, 2017 @08:20AM (#15747665)
Yes, I know the inteligence community uses this definition of air gap to signify the barrier between high/low networks, but I kinda feel it misses the point of the term. If it is networked to the outside world, even securely, I feel it kinda misses the point of the “air gap” connotation (aka requiring a “sneaker net” to get data in / out). I’m likely being pedantic though, so I upvoted you as you at least gave a good response unlike others.
Re:Announcing the New AWS Secret Region by derefr on Monday November 20, 2017 @05:37PM (#15743991)
It’s useful insofar as it’s connected to itself, allowing individuals and companies to share data and compute with one-another, where data can ingress/egress manually but travel the network between VPCs automatically.

It might also mean that the cloud is connected to networks that are not, themselves, Internet-routed. For example, users of the Secret region might have leased lines connecting airgapped computers in their own facilities directly to the DC for ingress/egress.

It might also mean that the network is connected to a “different Internet”, like MILNET.

Re:Announcing the New AWS Secret Region by abiox on Monday November 20, 2017 @05:54PM (#15744108)
inaccessible for whom? the public internet isn't the only (inter)network that exists.
Re:Announcing the New AWS Secret Region by chiph on Monday November 20, 2017 @06:33PM (#15744355)
They likely connect via encrypted leased lines.