News for hackers. Stuff that matters.
Re:It is no longer safe to move our governments and societie... by pclmulqdq on Sunday February 23, 2025 @11:07AM (#43150271)
It was never safe for any government to move any secrets to any cloud. The fact that the US government is okay with doing this with its own secrets surprises me to this day. You have no secrets from the person who owns your hardware.
Re:It is no longer safe to move our governments and societie... by im_down_w_otp on Sunday February 23, 2025 @11:31AM (#43150564)
I guess so, but based on current events, it doesn't seem like the US Govt. has any secrets that it places any value on. Between a bunch of glorified interns being given access to anything & everything and a bunch of known compromised department heads being appointed... it doesn't strike me that the US Govt. takes its national security very seriously at all.

The US Govt. seems empirically much more vested in what goes on in public restrooms than it does in what goes on in global affairs and military conflicts.

Re:It is no longer safe to move our governments and societie... by danaris on Sunday February 23, 2025 @12:09PM (#43150972)
I don't think you can extrapolate from the clusterfuck that's going on now to get any meaningful picture of what "the US Govt." has cared about at any time in the past. This is a completely unprecedented situation that nobody voted or asked for. (Not even the ones who voted for Trump, misguided as I may think they are, voted for this, because AFAIK there was no announcement before the election that Musk would be given this kind of power.)
Re:It is no longer safe to move our governments and societie... by watwut on Sunday February 23, 2025 @12:13PM (#43151020)
I see Americans defending Trumps and Musk. Or acting as if everyone just overreacted. So I would say, quite a lot of Americans are either fine with this or actively want it.
Re:It is no longer safe to move our governments and societie... by moshun on Sunday February 23, 2025 @12:31PM (#43151178)
There are 300M people here and Trump won by ~200K. You can safely say that some are fine with this administrations behavior, but many are not and starting to actively protest and resist. Both are true simultaneously.
Re:It is no longer safe to move our governments and societie... by DaSHacka on Sunday February 23, 2025 @01:33PM (#43151770)
He still got almost 48% of the overall vote, however.

He may not have won the popular vote by much, but he certainly has a dedicated base of staunch supporters.

By their unceasing jeering, bright hats, and constant online presence I'd be surprised if there's anyone hasn't noticed them by this point.

Somehow it's worse than in 2016

Re:It is no longer safe to move our governments and societie... by sydbarrett74 on Sunday February 23, 2025 @01:05PM (#43151477)
The masses are asses.
Re:It is no longer safe to move our governments and societie... by ttyprintk on Monday February 24, 2025 @09:16AM (#43159791)
I heard a meaningful quiet after the H1B fight. The kind of guys who said “kick em out! Imma get me one of them high-pay tech jobs” Those guys had to watch Trump, revealed to employ a lot of H1-class workers, claim we need more.
Re:It is no longer safe to move our governments and societie... by im_down_w_otp on Sunday February 23, 2025 @12:18PM (#43151076)
The very fact that it's even possible to have this kind of thing happening unfettered, unconstrained, and unaccountable is evidence in and of itself that the US Govt. doesn't take its national security & secrets seriously though, isn't it?
Re:It is no longer safe to move our governments and societie... by epistasis on Sunday February 23, 2025 @12:27PM (#43151145)
In what sense?
Re:It is no longer safe to move our governments and societie... by im_down_w_otp on Sunday February 23, 2025 @12:37PM (#43151230)
In that taking those things seriously would have included:

* More creative threat-modeling.

* More effective prevention measures.

* More vigorous mitigation & stonewalling attempts.

* More rapid remediation & rejection of the intrusion.

Especially for a threat vector that was telegraphed so openly so far in advance. The circumstances might be unprecedented, but they're not at all surprising.

Re:It is no longer safe to move our governments and societie... by epistasis on Sunday February 23, 2025 @03:19PM (#43152833)
What sort of threat modeling would have prevented this?

There are plenty of mitigation and stonewalling going on, but mostly through the courts.

Executives must have some power, or else the process itself becomes the executive and there's no ability to respond to anything.

If there's anybody to blame, we must place the blame on the executive wielding the power, and those who have enabled this to happen by putting that particular executive in power by subverting the traditional vetting process. If a political party no longer performs basic vetting of that level then the entire party should probably be eliminated.

Re:It is no longer safe to move our governments and societie... by epistasis on Sunday February 23, 2025 @12:18PM (#43151077)
It was well known that this was exactly what Musk would do, by anyone paying the slightest shred of attention to what was going on.

He said it was what he was going to do, he was up on the stage, I heard many many people salivating for DOGE cuts like this before the election, and even today.

Re:It is no longer safe to move our governments and societie... by oooyay on Sunday February 23, 2025 @12:46PM (#43151327)
> It was well known that this was exactly what Musk would do, by anyone paying the slightest shred of attention to what was going on.

I agree, and frankly anyone feeling "surprised" right now probably still thinks strongly worded emails and letters are enough to solve the problems they're just now seeing. Those things rely on a stable democracy where constituents and what happens to them matter at all.

Re:It is no longer safe to move our governments and societie... by ttyprintk on Monday February 24, 2025 @09:06AM (#43159690)
> anyone feeling "surprised" right now probably still thinks strongly worded emails and letters are enough

No, it’s completely different than that. Some of them I’ve talked to, they’re confused about this Musk Internet guy. And they’re confused why their news isn’t giving them the predictive edge those aware of Project 2025 seem to have in conversation. “I guess we’ll see…” “I guess we’ll have to have hope…” The same people willing to accept fabulist conspiracy theories for non-white-male candidates now openly rely on faith-based appeals about the character of the richest man in the world.

Re:It is no longer safe to move our governments and societie... by oooyay on Tuesday February 25, 2025 @01:13PM (#43175325)
I don't think we disagree. I'm just saying they're so far behind that they're not useful; the republic is already gone. What we're talking in is the shell of it.
Re:It is no longer safe to move our governments and societie... by ethbr1 on Sunday February 23, 2025 @12:19PM (#43151080)
Musk buying Twitter and then spending millions to buy votes in PA weeks before the election seemed pretty obvious.

People like him don't spend without an expectation of something in return.

The more surprising thing is the amount of people who think successful capitalist = successful political leader, when the incentives and constituencies are drastically different.

Re:It is no longer safe to move our governments and societie... by jensensbutton on Sunday February 23, 2025 @12:28PM (#43151157)
On the contrary this is exactly what they said they'd do if elected. This is exactly what was voted for. Don't pretend like Americans didn't have agency in the destruction of their own country.
Re:It is no longer safe to move our governments and societie... by jrflowers on Sunday February 23, 2025 @12:33PM (#43151190)
This is a good point. Aside from the objectively unavoidable and nigh-uncountable deluge of articles, opeds, social media posts, video news segments and direct statements from the candidate and his representatives describing exactly what they intended to do and a 927 page document detailing the plan that was released two and a half years before the election, what warning did anybody have?
Re:It is no longer safe to move our governments and societie... by hedora on Sunday February 23, 2025 @12:38PM (#43151234)
The polls are starting to agree with you. Trump’s actions are extremely unpopular, and support from his base is eroding:

> In the CNN poll, Musk having a prominent role in the administration is viewed as a “bad thing” (54-28) by a nearly 2-to-1 ratio. The Post-Ipsos poll showed Americans disapprove by a similarly wide margin (52-26) of Musk “shutting down federal government programs that he decides are unnecessary.”

> And Americans said 63 to 34 that they are concerned about Musk’s team getting access to their data, which is the subject of high-profile legal fights.

> Even 37 percent of Republican-leaning voters said they are at least “somewhat” concerned about Musk getting their data.

https://www.washingtonpost.com/politics/2025/02/20/trump-pol...

Re:It is no longer safe to move our governments and societie... by ttyprintk on Monday February 24, 2025 @08:57AM (#43159614)
Thank you. This’ll be cake compared to the inevitable bailout of DOGE.
[dead]
Re:It is no longer safe to move our governments and societie... by dang on Sunday February 23, 2025 @12:39PM (#43151253)
You can't post like this here. Since this account has been doing it repeatedly, I've banned the account.

If you don't want to be banned, you're welcome to email [email protected] and give us reason to believe that you'll follow the rules in the future. They're here: https://news.ycombinator.com/newsguidelines.html.

[dead]
Re:It is no longer safe to move our governments and societie... by Boldened15 on Sunday February 23, 2025 @11:53AM (#43150803)
I believe the audit stuff is overblown [1], there are strict requirements for passing and it doesn’t mean the money is literally disappearing into a black hole. I don’t have every Chipotle receipt saved in the past year but that doesn’t mean my spending is mysterious. I assume that’s why being audited by the IRS is considered a nightmare, it’s nontrivial.

It seems the Pentagon audit process only started in 2018, and Congress gave a deadline of 2028 to pass a fully clean audit, which they have made progress on:

> Of the 28 military agencies, DoD leaders think 11 are expected to receive clean audit opinions, one more than the previous fiscal year.

[1] https://thenationaldesk.com/news/fact-check-team/pentagon-fa...

Re:It is no longer safe to move our governments and societie... by pell on Sunday February 23, 2025 @11:55AM (#43150826)
I'm very sure that there is a lot of spending that is used inefficiently. Any large organization does run into that problem. Resolving some issues, cutting red tape, making processes more efficient, all that is probably a good idea. However, "DOGE" and those cheering them on have not produced any evidence for the vast majority of the claims they made. Often they also just misrepresented facts (e.g., USAID supposedly funding media sites, condoms in Gaza and many other nonsense) or simply lied. I also don't see much promotion of actual nuanced views on the topic like the Hamilton Project's tracker of federal expenditures which you can find here: https://www.hamiltonproject.org/data/tracking-federal-expend...

At the moment, the US government seems to be mainly focused on causing headlines to make their base happy who want quick victories and have not shown a resilience to simplistic takes, and - of course - to make the opposition party and their supporters panic.

Re:It is no longer safe to move our governments and societie... by ttyprintk on Monday February 24, 2025 @08:30AM (#43159341)
And what qualities of an audit would you trust from a department that acts like that? They’re not, for example, combining all prior audits into a sophisticated longitudinal audit research tool. They’ve prepared their conclusions to hold even if they misplace three orders of magnitude.
Re:It is no longer safe to move our governments and societie... by im_down_w_otp on Sunday February 23, 2025 @11:47AM (#43150748)
I have literally no idea how this relates to what I said. Did you mean to reply to someone else?
Re:It is no longer safe to move our governments and societie... by lostlogin on Sunday February 23, 2025 @11:58AM (#43150860)
It’s that mentality of ‘flooding the zone’.
Re:It is no longer safe to move our governments and societie... by ttyprintk on Sunday February 23, 2025 @11:48AM (#43150764)
There are plenty of charts based on public budgets, you can pick your favorite. How shall we judge whether transparency is improved? What if all of this results in less transparency?
Re:It is no longer safe to move our governments and societie... by sympil on Sunday February 23, 2025 @11:53AM (#43150810)
The only audits that have failed have to do with national defense budgets. athis is the one area of government that Republicans hate to cut.
Re:It is no longer safe to move our governments and societie... by solarengineer on Sunday February 23, 2025 @11:51AM (#43150790)
Your question can be answered without giving away control and access to unauthorised and inexperienced auditors.

Governance, Risk, and Compliance has been missing. Too many decades of nepotism, insider trading, corruption ( starting with lobbying ), have led to the lack of transparency. The movie “The Big Short” has explained some of these issues.

Re:It is no longer safe to move our governments and societie... by SketchySeaBeast on Sunday February 23, 2025 @11:47AM (#43150753)
Many many years ago I used to work at a drug store with two tills and we couldn't account for every penny.
Re:It is no longer safe to move our governments and societie... by ugexe on Sunday February 23, 2025 @11:45AM (#43150739)
What audits?
Re:It is no longer safe to move our governments and societie... by Onawa on Sunday February 23, 2025 @11:48AM (#43150762)
Pentagon audits, they've failed for 7 years in a row and they don't expect to be able to pass an audit until 2028 https://breakingdefense.com/2024/11/pentagon-fails-7th-audit...
Re:It is no longer safe to move our governments and societie... by NekkoDroid on Sunday February 23, 2025 @11:53AM (#43150802)
Has Elon (I guess rather his "DOGE" department) so far even remotely touched anything military related?
Re:It is no longer safe to move our governments and societie... by torstenvl on Sunday February 23, 2025 @12:07PM (#43150957)
Yes.
Re:It is no longer safe to move our governments and societie... by torstenvl on Sunday February 23, 2025 @12:45PM (#43151315)
Yes.
Re:It is no longer safe to move our governments and societie... by ttyprintk on Monday February 24, 2025 @08:33AM (#43159369)
Nuclear workers in the Department of Energy are militarized.
Re:It is no longer safe to move our governments and societie... by theandrewbailey on Sunday February 23, 2025 @11:50AM (#43150779)
Poster is probably referring to the audits that the Pentagon keeps failing year after year: https://www.defensenews.com/pentagon/2023/11/16/pentagon-fai...
Re:It is no longer safe to move our governments and societie... by enragedcacti on Sunday February 23, 2025 @11:57AM (#43150849)
Don't mistake obliviousness for a conspiracy. The vast majority of the doge savings link straight to the Federal Procurement Data System that anyone can search or ingest from. You're of course free to disagree with the spending but if you weren't even aware you could look at these contracts then maybe you should ask if you're being shown the whole picture or if it's closer to a politically motivated hit job on our civil servants.
Re:It is no longer safe to move our governments and societie... by ttyprintk on Monday February 24, 2025 @08:46AM (#43159495)
And one could peruse that under any administration. The challenge for an honest DOGE is that they must do better than 100% of past Federal efficiency policy, which is maybe a hundred incremental changes[0]. If they cause _any_ problems that those fixed, then they’re at best not up to the job and maybe even deserving cynicism.

[0](https://trumpwhitehouse.archives.gov/omb/management/office-f...)

Re:It is no longer safe to move our governments and societie... by hammock on Sunday February 23, 2025 @11:52AM (#43150796)
Well there was a Secretary of State email server that seemed secret enough to Bleachbit…
Re:It is no longer safe to move our governments and societie... by arunabha on Sunday February 23, 2025 @12:18PM (#43151079)
You do realize that whataboutisms don't actually prove your point? Implicitly you're saying that what Hillary did was wrong, but now that my guy is doing it, it's ok, since Hillary did it. You can't have it both ways. You either believe something is wrong, or it's not. To argue both sides usually means a bad faith attempt at pushing a narrative.
Re:It is no longer safe to move our governments and societie... by watwut on Sunday February 23, 2025 @12:12PM (#43151004)
And people who made big deal about that while being silent now are quite massive hypocrites.

It is so clear in retrospect how fake the outrage was.

Re:It is no longer safe to move our governments and societie... by vrosas on Sunday February 23, 2025 @12:15PM (#43151059)
The outrage wasn’t only fake, it was literally manufactured by Russian bots.
Re:It is no longer safe to move our governments and societie... by im_down_w_otp on Sunday February 23, 2025 @12:10PM (#43150984)
I'm not sure I'm understanding the relationship to what I said there.

Is that example supposed to be an indication that the US Govt. does take its national security and secrets seriously?

Re:It is no longer safe to move our governments and societie... by DaSHacka on Sunday February 23, 2025 @01:28PM (#43151707)
The sheer number of flagged replies to this comment is telling.
Re:It is no longer safe to move our governments and societie... by torstenvl on Sunday February 23, 2025 @04:48PM (#43153531)
Some political views are now prohibited on HN, it would appear.

EDIT: Case in point.

Re:It is no longer safe to move our governments and societie... by jandrewrogers on Sunday February 23, 2025 @11:39AM (#43150666)
It isn't uniform by any means but the US runs on a physically independent cloud, often in their own facilities, designed by the big cloud companies. When using the public cloud for unclassified work (e.g. working with outside vendors), the data is only allowed to reside in specific data centers that have been vetted by the government, not all US regions have the same authorization. For example, government data in an S3 bucket in the public cloud may only be accessed and processed within the same region, which can be annoying if your infrastructure is elsewhere.

The US is far ahead of most countries when it comes to government use of the cloud. Other developed countries often learn how to do it from the US but are less comfortable with the technical requirements, which slows down adoption.

Re:It is no longer safe to move our governments and societie... by dataflow on Sunday February 23, 2025 @02:21PM (#43152245)
Physical isolation is kind of irrelevant for the concerns being voiced here no? It's not like Europe's main worry is random people walking in and yanking hard disks out of servers in datacenters.
Re:It is no longer safe to move our governments and societie... by KennyBlanken on Sunday February 23, 2025 @02:28PM (#43152317)
Other developed countries are less comfortable because all the major cloud providers are US-owned companies and the NSA has a very, very long history of using US companies as information security weapons.

Not that they're the only ones. Israel has been busy stuffing investment cash into the pockets of Unit 8200 members so they can found security software and service startups coughSnykcough

Re:It is no longer safe to move our governments and societie... by red-iron-pine on Monday February 24, 2025 @01:52PM (#43163322)
for Israel I would have said Check Point firewalls, or the company that owns Express VPN and Private Internet Access
Re:It is no longer safe to move our governments and societie... by vimbtw on Sunday February 23, 2025 @02:53PM (#43152595)
This is a great point. For example, near where I live there’s a massive Google cloud warehouse out in the middle of a field next to the highway. Inside of that warehouse there’s a separate section for servers belonging to the US government that can benefit from all the electricity contracts Google has negotiated, the physical security and fences that Google has set up, and the fiber optic cables they’ve laid.

It’s the best of both worlds, they get the decades of research Google has put into systems engineering and fault tolerance while retaining the security of having their own servers.

Re:It is no longer safe to move our governments and societie... by radicalbyte on Sunday February 23, 2025 @03:07PM (#43152720)
It's not the technology, it's the US Cloud Act which has slowed a lot of it down.

Very few actually qualified and capable techies here trust any of the US-based cloud providers.

Re:It is no longer safe to move our governments and societie... by tremon on Wednesday February 26, 2025 @11:35AM (#43185283)
Same for the German cloud, it's Azure Stack but operated by a subsidiary of Deutsche Telekom IIRC.
Re:It is no longer safe to move our governments and societie... by rapatel0 on Sunday February 23, 2025 @11:54AM (#43150816)
The US Gov't has their own GOV Cloud Datacenter Regions. It's run by azure and AWS but there are restrictions on who is allowed to use it. It's not really public

https://aws.amazon.com/govcloud-us/?whats-new.sort-by=item.a...

https://learn.microsoft.com/en-us/azure/azure-government/doc...

Re:It is no longer safe to move our governments and societie... by ocdtrekkie on Sunday February 23, 2025 @12:47PM (#43151330)
The point is Amazon and Microsoft surely have vested interests in government data they are not supposed to be privy to.
Re:It is no longer safe to move our governments and societie... by pclmulqdq on Sunday February 23, 2025 @02:45PM (#43152505)
It's not just the corporations as a whole that are an issue. It increases the insider risk footprint of that data to include your cloud provider's employees as well as your own. Amazon, Microsoft, and Google almost certainly employ agents of your adversaries (including US agents working without their knowledge) who have weird attack vectors and now have to be part of your threat model.
Re:It is no longer safe to move our governments and societie... by aprilthird2021 on Sunday February 23, 2025 @01:05PM (#43151475)
And the government has lots of leverage it can use against Amazon and MS if they use it in a way the government doesn't want. EU govts don't have that
Re:It is no longer safe to move our governments and societie... by _DeadFred_ on Sunday February 23, 2025 @01:53PM (#43151971)
US Government leverage: $200,000 fine, appealable.
Re:It is no longer safe to move our governments and societie... by tyre on Sunday February 23, 2025 @02:39PM (#43152441)
US Government leverage: FISA secret court, prison time
Re:It is no longer safe to move our governments and societie... by userbinator on Sunday February 23, 2025 @03:59PM (#43153167)
Not with this current government.
Re:It is no longer safe to move our governments and societie... by overstay8930 on Sunday February 23, 2025 @03:47PM (#43153070)
touch the right HSM in one of these facilities and you get to know what it's like to disappear
Re:It is no longer safe to move our governments and societie... by int_19h on Wednesday February 26, 2025 @08:39PM (#43190360)
"That's a nice little monopoly you have there. Would be a shame if Department of Commerce decided to investigate it."
Re:It is no longer safe to move our governments and societie... by pessimizer on Sunday February 23, 2025 @06:03PM (#43154089)
You're assuming the people who handle it for the government weren't working at Amazon and Microsoft a year ago, and won't again be working for Amazon and Microsoft a year from now.

The government doesn't have leverage. The government is Amazon and Microsoft's leverage against others.

Re:It is no longer safe to move our governments and societie... by losradio on Sunday February 23, 2025 @02:12PM (#43152144)
I am sure both companies have NDAs and contractual agreements in place that can be enforced and monitored.
Re:It is no longer safe to move our governments and societie... by locusofself on Sunday February 23, 2025 @07:05PM (#43154469)
The 4 major cloud vendors (Azure, AWS, GCP and Oracle) all have Air-gapped regions in addition to their "GovCloud" regions.
Re:It is no longer safe to move our governments and societie... by closeparen on Sunday February 23, 2025 @11:36AM (#43150627)
The US government’s secrets are routinely held and processed by contractors. The prototypical government secret is something like the plans of an airplane designed and manufactured by Lockheed Martin.
Re:It is no longer safe to move our governments and societie... by zombiwoof on Sunday February 23, 2025 @02:34PM (#43152380)
Elon Musk will have access to all data.

That should scare everyone given his propaganda machinery aimed at elections he does or doesn’t like

Re:It is no longer safe to move our governments and societie... by DamnYuppie on Monday February 24, 2025 @11:13AM (#43161221)
Were you this afraid of the propaganda machinery when it was aimed at conservatives? It seems far less radicalized now then it was. Just now other voices are actually allowed.
Re:It is no longer safe to move our governments and societie... by red-iron-pine on Monday February 24, 2025 @04:21PM (#43165063)
his propaganda machinery hasn't been aimed at conservatives for a decade or more now.

"other voices" is a joke given how much censorship there is on twitter

Re:It is no longer safe to move our governments and societie... by dcrazy on Sunday February 23, 2025 @11:43AM (#43150722)
“Secrets” is a broad term that covers everything from payroll information to the history of CIA clandestine operations. Only some kinds of these are stored in the cloud.
Re:It is no longer safe to move our governments and societie... by kazinator on Sunday February 23, 2025 @12:11PM (#43150990)
[delayed]
Re:It is no longer safe to move our governments and societie... by ivanmontillam on Sunday February 23, 2025 @12:13PM (#43151015)
Yes, I agree.

I make the parallel with "gold." Whoever has your gold, got you by the hanging spheres.

Given the importance of data today, I am baffled common citizens are not familiar with the "Data at rest" principle.

Re:It is no longer safe to move our governments and societie... by zhengiszen on Sunday February 23, 2025 @01:22PM (#43151627)
Nice comparison
Re:It is no longer safe to move our governments and societie... by cscurmudgeon on Sunday February 23, 2025 @03:13PM (#43152774)
So the US is within its rights to ban TikTok?
Re:It is no longer safe to move our governments and societie... by ivanmontillam on Sunday February 23, 2025 @03:35PM (#43152981)
No, that's overreaching.

If a country's citizens want to give away their data, it's well within their right to do so. At most, the U.S. Government should educate about it, much like tobacco dangers.

Having that said, U.S. citizens with clearance and/or government employees should be subject to data loss prevention measures, like they already do[0].

I'd be forward for a ban if it was an issue of public mental health, but the U.S. Government cannot take that angle because they'd have to kill Meta Platforms as well. They know they can't, Meta lobbyists will not allow that.

But restricting TikTok based on data control and free speech liberties, that's overreaching. I've already seen TikTok videos of people saying they'd stamp their U.S. passport on the forehead and give it to Chinese ByteDance rather than use Instagram. It is well within their rights to do so if they so desire.

--

[0]: https://www.pbs.org/newshour/politics/why-tiktok-is-being-ba...

Re:It is no longer safe to move our governments and societie... by ivanmontillam on Sunday February 23, 2025 @03:52PM (#43153103)
Quick note I wanted to add: My take on this matter comes from a "regardless of what you do, the why is more important than the what."

Ban TikTok? Do whatever, I don't use my account. I deleted the app long ago.

Why do you do it? Fight that tooth and nail. Do it for the right reason and be consistent.

Re:It is no longer safe to move our governments and societie... by breadwinner on Sunday February 23, 2025 @12:10PM (#43150977)
> You have no secrets from the person who owns your hardware.

What if the hardware is physically located in your own country, and employees of cloud vendor are virtually "accompanied", and watched, any time they login to the hardware? That's called sovereign cloud and all cloud vendors have it.

Re:It is no longer safe to move our governments and societie... by tpm on Sunday February 23, 2025 @12:12PM (#43151000)
But the long hand of US law reaches even there if it is owned by an US company.
Re:It is no longer safe to move our governments and societie... by 8note on Sunday February 23, 2025 @08:57PM (#43155121)
or if the company that runs it touches a US dollar
Re:It is no longer safe to move our governments and societie... by rcpt on Sunday February 23, 2025 @11:28AM (#43150525)
Security isn't a "safe" vs. "not safe" bool
Re:It is no longer safe to move our governments and societie... by dmantis on Sunday February 23, 2025 @11:31AM (#43150561)
The world literally has hard proofs of mass espionage by the NSA and CIA after Snowden and Wikileaks Vault 7. Moving your government secrets to the US cloud has been madness for at least 12 years.
Re:It is no longer safe to move our governments and societie... by rcpt on Sunday February 23, 2025 @11:42AM (#43150702)
Re:It is no longer safe to move our governments and societie... by dmantis on Friday February 28, 2025 @08:25AM (#43205310)
It's not a boolean value, I don't get the irony.

If China and Russia can somehow solve the issue and manage their infra, I don't see why EU, for example, can't.

It's better to have at least partially protected your whole government and citizens data than having it handed directly to the foreign intelligence in bulk. That's the question about political will, we don't talk about average Joe here.

Re:It is no longer safe to move our governments and societie... by raverbashing on Sunday February 23, 2025 @11:41AM (#43150684)
Cool, encrypt everything before uploading. Keep the key client-side

See, parent is right? Safe/not safe dichotomy helps nobody

Re:It is no longer safe to move our governments and societie... by ta988 on Sunday February 23, 2025 @12:33PM (#43151191)
I didn't know that computation on encrypted data without decryption was solved overnight.
Re:It is no longer safe to move our governments and societie... by erikerikson on Sunday February 23, 2025 @02:19PM (#43152222)
It seems like you might be aware of limitations but for those who aren't aware of the technique:

https://en.m.wikipedia.org/wiki/Homomorphic_encryption

Re:It is no longer safe to move our governments and societie... by eesmith on Monday February 24, 2025 @07:08AM (#43158608)
When I last looked into it, the compute overhead was very high, such that (for the tasks I was looking at) it seemed significantly cheaper to handle everything on-premises with trusted hardware than remotely on untrusted hardware.

To be clear, this was 10 years ago so things may have changed. Also, my task was memory bandwidth limited, where even changing the memory access patterns slowed things down by 10% or more.

Re:It is no longer safe to move our governments and societie... by dijit on Sunday February 23, 2025 @11:34AM (#43150588)
Correct, it's more like a bitmask.

Except if any of the bits are flipped you're f-d; especially so if your adversary is a nation.

Re:It is no longer safe to move our governments and societie... by whimsicalism on Sunday February 23, 2025 @11:55AM (#43150836)
you can obviously have secrets from someone who holds your ssd, that is the whole point of encryption.
Re:It is no longer safe to move our governments and societie... by ncallaway on Sunday February 23, 2025 @12:08PM (#43150962)
I feel like you've narrowed the original statement ("You have no secrets from the person who owns your hardware") when you scope it to just data storage at rest. I take hardware to mean significantly more than just at rest data storage in the context that it was used.

If your unencrypted data flows through any AWS memory or compute, or if your encryption key flows through any AWS memory or compute, then AWS *can* access that data.

Re:It is no longer safe to move our governments and societie... by whimsicalism on Sunday February 23, 2025 @01:27PM (#43151690)
> It was never safe for any government to move any secrets to any cloud.

does this not refer to moving data?

Re:It is no longer safe to move our governments and societie... by ncallaway on Sunday February 23, 2025 @01:48PM (#43151911)
I don’t think it refers solely to data at rest, no.
Re:It is no longer safe to move our governments and societie... by TechDebtDevin on Sunday February 23, 2025 @12:07PM (#43150955)
Thats not fool proof what so ever.
Re:It is no longer safe to move our governments and societie... by sidibe on Sunday February 23, 2025 @01:39PM (#43151822)
It's as fool proof as you can get though.

If your data is well encrypted they practically don't have any access to any of the information except how much of it there is

Re:It is no longer safe to move our governments and societie... by dangus on Sunday February 23, 2025 @11:43AM (#43150718)
Isn't this just kind of willfully ignorant to the way the government cloud works?

GovCloud claims that it's used to "manage sensitive data and controlled unclassified information (CUI)."

I don't think the US government is dumping classified info onto corporate cloud environments judging by this description from GovCloud. But there's plenty of info that's sensitive but unclassified and the government does need to function in a lot of ways that doesn't involve state secrets.

https://aws.amazon.com/govcloud-us/ for more of a description of what GovCloud actually is.

Re:It is no longer safe to move our governments and societie... by thesuperbigfrog on Sunday February 23, 2025 @12:36PM (#43151225)
>> I don't think the US government is dumping classified info onto corporate cloud environments judging by this description from GovCloud.

There are cloud environments specifically for classified info:

https://aws.amazon.com/federal/secret-cloud/

https://techcommunity.microsoft.com/blog/coreinfrastructurea...

Re:It is no longer safe to move our governments and societie... by dgacmu on Sunday February 23, 2025 @12:49PM (#43151346)
Re:It is no longer safe to move our governments and societie... by jiveturkey on Sunday February 23, 2025 @11:59AM (#43150871)
There are secrets and then there are secrets.

For the former, confidential compute is far enough along that this data can in fact be secret from the hardware owner. This is vital even for on-prem hardware -- IT folks and techs with physical access shouldn't have access simply due to proximity.

For the latter, sure, but this is very expensive. It goes well beyond owning the hardware.

Re:It is no longer safe to move our governments and societie... by jviotti on Sunday February 23, 2025 @12:26PM (#43151131)
I think this is the key. It is cheaper and more convenient than ever to deploy and manage data critical services yourself, in a self hosted manner that is protected by whatever jurisdiction you are in. What matters is not who builds it, but who has access to the data, and ideally, that's only you!
Re:It is no longer safe to move our governments and societie... by cogman10 on Sunday February 23, 2025 @12:39PM (#43151249)
This does raise a valid question of what secrets can or should the government have.

I think it's obvious that some secrets should be kept. It makes little sense to expose our nuclear secrets, counter espionage, or ongoing investigation efforts. But how far does or should that extend? Should everything the NSA/CIA/FBI/IRS does be secret? Should they stay secret for years or decades or forever?

IMO, the US goes too far in it's secrets. Stuff gets classified that just makes the government look bad and that's dangerous.

And that's where I'm somewhat less concerned about putting US secrets into the cloud. Sure there's highly sensitive stuff that shouldn't go there, but there's also a lot of stuff that shouldn't have been a secret in the first place.

Re:It is no longer safe to move our governments and societie... by Andrex on Sunday February 23, 2025 @02:07PM (#43152099)
FOIA makes the US gov't one of the more transparent democracies, as a counterpoint. So much so it started getting copied by them.

https://reason.com/2024/12/26/foia-for-all/

Re:It is no longer safe to move our governments and societie... by Nullabillity on Sunday February 23, 2025 @03:48PM (#43153075)
According to the very link you posted, the US was two whole centuries late to the party. Better late than never of course, but the spin of trying to then frame it as an American Victory(tm) is pretty ridiculous.
Re:It is no longer safe to move our governments and societie... by thelamest on Sunday February 23, 2025 @02:41PM (#43152468)
“Transparency” as leaks from abuse is very, very different from transparency as a policy of easy access – and neither makes you necessarily better informed. In short, a biased selection of information can leave you worse off than having no information.
Re:It is no longer safe to move our governments and societie... by GeoAtreides on Sunday February 23, 2025 @12:55PM (#43151406)
pretty sure my remote encrypted backups[1] can keep a secret or two from the cloud storage provider

[1]https://rclone.org/crypt/

Re:It is no longer safe to move our governments and societie... by riffic on Sunday February 23, 2025 @01:14PM (#43151542)
That's not necessarily true if you use the appropriate tools and controls to safeguard data. Further, "any cloud" is a sweeping generalization and not all clouds are created equal. You raise valid concerns about trusting third-party hardware BUT.. come on, ease up on the alarmism.

To elaborate: robust encryption, dedicated hardware security modules (HSMs), and sophisticated key management safeguards data even if it resides on someone elses hardware.

If you design your system properly, even if the cloud provider manages the underlying hardware, your secrets remain secure because the keys and sensitive data are protected in a controlled, isolated environment.

Re:It is no longer safe to move our governments and societie... by aiono on Sunday February 23, 2025 @01:26PM (#43151688)
The US government is okay basically because people who own cloud platforms are part of the government.
Re:It is no longer safe to move our governments and societie... by rsync on Sunday February 23, 2025 @04:00PM (#43153173)
I disagree.

Why would encrypted data, which the provider holds no keys to, be a dangerous way For a government to hold a secret?

Re:It is no longer safe to move our governments and societie... by jjav on Monday February 24, 2025 @04:07AM (#43157350)
> The fact that the US government is okay with doing this with its own secrets surprises me to this day.

This fact conveys information. Namely, how tightly bound these supposedly independent services like AW GovCloud are with the government itself.

Which also tells us how much direct access the government has to all the AWS (and all other providers) infrastructure.