Re: Cloud computing is the story of our lifetime

Such trust models might work for software running immediately on general
purpose computers, provided that the OS provides process isolation and the
possibility to ensure that no debug hooks are present. They won't work for
software running in a VM or a Cloud. The situation such software is in
could be compared with the situation a computer user would be in if he had
to enter his password with someone constantly looking over his shoulder
and with the GUI displaying it unmasked as he types. It's not a problem if
he trusts the person looking over his shoulder, but he obviously have to
have trust in him.

Sorry, I'm not seeing that. The attack surface for something like a web
server is the same across the platforms (whatever is in the api the os
exposes to running apps), and I don't see how it's any different from any
hosted app that's in an environment with a lot of other hosted apps. Maybe
the apps could all be trying to hook each other, but I'm not aware of apps
currently being able to hook across virtualized environments.

No doubt there are technical issues here, but the cloud services that make
it will have a combination of social controls and allow only apps that run
in a de-fanged (J)VM that those cloud vendors provide. You're the expert
here, so I'm sure I could be making the classical security mistake of
glossing over scenarios. But if this cloud eco-system is superior to the
traditional relationship we've had with pc's, and I think it is, new life
will find a way, and we'll figure out a way to have the risk mitigated to
acceptable, business-quality levels.

James


.

Relevant Pages

  • Re: Cloud Computing
    ... Cloud Computing ... If you have a slow connection to the internet then hosting apps used ... The users of your brilliant web app may still find it faster to connect ...
    (comp.lang.java.programmer)
  • Re: Maybe Safari 4 actually is for Windows
    ... Normal desktop apps can have their individual views accessed from ... And using the term "cloud" for it is more precise. ... There is something web apps do that desktop apps don't, ...
    (comp.sys.mac.advocacy)
  • Re: Cloud Computing
    ... Cloud Computing came out of SOA and SaaS. ... I have a 3Mb/s links and it's painful to try and use it for running most apps. ... Somehow I don't think the bandwidth of my net connection will ever match that of my HDD ... As for huge variations in resource requirements, even I don't have much need for a supercomputer. ...
    (comp.lang.java.programmer)
  • Re: Cloud Computing
    ... Cloud Computing came out of SOA and SaaS. ... I have a 3Mb/s links and it's painful to try and use it for running most apps. ... Somehow I don't think the bandwidth of my net connection will ever match that of my HDD ...
    (comp.lang.java.programmer)
  • Re: Cloud Computing
    ... Cloud Computing came out of SOA and SaaS. ... So it may be called something else in a few years time but it's worth investing time into learning about it now. ... I have a 3Mb/s links and it's painful to try and use it for running most apps. ... by internal users in the cloud is not good, ...
    (comp.lang.java.programmer)