Of course, this particular concern only makes sense if you apply the same
standards of security locally.

We put some (not very sensitive) data on EC2 servers (in the US - spending
more for Singapore servers doesn't make much sense unless you are doing web
serving or something where latency is critical).

Our security folk expressed concern that Amazon data centre employees could
get access to our data; from what I read at
http://aws.amazon.com/securityand other pages, I think there's a far
higher risk of one of *our* data
centre employees (or pretty well any tech-savvy employee for that matter)
getting access to our data.  I'm not sure we've ever run a background check
on our admins, and I strongly suspect Amazon folks know far more about
security than any of our "experts".  And they probably pay their admins
better than we do :)

I'm all in favour of real security for real problems, but the sort of FUD
security I usually meet at big corporates is more about protecting the jobs
of the security staff than actually identifying real risks, evaluating their
real probability, and dealing with them appropriately.

</rant>

- Korny

On Wed, Nov 17, 2010 at 1:03 PM, Clifford Heath <[email protected]>wrote:

> On 17/11/2010, at 12:07 PM, Anthony Richardson wrote:
>
>> ... think it is sensible to require a bank to consider and seek
>>
>> approval before doing something like putting massive amounts of
>> banking information under the jurisdictional of a foreign government.
>>
>
> Industrial espionage is more common than you'd think too, and with
> the rise of systems like Xero (for example) there's a valid concern
> about a competitor buying your customer list from an underpaid
> employee of theirs in India (supposing they have any).
>
> Clifford Heath.
>
> --
> You received this message because you are subscribed to the Google Groups
> "Ruby or Rails Oceania" group.
> To post to this group, send email to [email protected].
> To unsubscribe from this group, send email to
> [email protected]<rails-oceania%[email protected]>
> .
> For more options, visit this group at
> http://groups.google.com/group/rails-oceania?hl=en.
>
>


-- 
Kornelis Sietsma  korny at my surname dot com http://korny.info
"Every jumbled pile of person has a thinking part
that wonders what the part that isn't thinking
isn't thinking of"

-- 
You received this message because you are subscribed to the Google Groups "Ruby 
or Rails Oceania" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/rails-oceania?hl=en.

Reply via email to