News for hackers. Stuff that matters.

A comment on Visualizing Meltdown on AWS. Parent comment

Re:Visualizing Meltdown on AWS by xiaodown on Saturday January 13, 2018 @09:50AM (#16139794)
That's not the only issue; there's also a lot of compliance issues that having a hosting company can take care of. There's whole sections of PCI and HIPPA compliance that you can just write off as "not our problem, talk to AWS".
[ Parent | on HN ]
Re:Visualizing Meltdown on AWS by scurvy on Saturday January 13, 2018 @10:38AM (#16139926)
PCI compliance had little to do with where you're hosted, but how you're hosted and what you do with data.

AWS is not a magical PCI compliance button.

[ Parent | on HN ]
Re:Visualizing Meltdown on AWS by 013a on Saturday January 13, 2018 @01:13PM (#16140485)
Theoretically, it isn't. In actuality, and in our experience, there are a lot of compliance standards where just saying "we're on AWS" gets you 90% of the way toward acceptance. Its mostly buzzword compliance.
[ Parent | on HN ]
Re:Visualizing Meltdown on AWS by scurvy on Sunday January 14, 2018 @10:20AM (#16144574)
That's just not true. Most of PCI compliance is documenting practices and operations. Have you even completed all various levels of compliance? Or have you just done one level?
[ Parent | on HN ]