Follow Us

We use cookies to provide you with a better experience. If you continue to use this site, we'll assume you're happy with this. Alternatively, click here to find out how to manage these cookies

hide cookie message

Amazon's Wikileaks rejection raises cloud trust concerns

What is and isn’t acceptable for cloud computing?

Article comments

When the Wikileaks "cablegate" scandal broke last week, those behind the whistle-blowing Website found their servers under heavy load. No surprise there, of course, but an additional DDoS hack attack didn't help.

To remedy the situation, Wikileaks did what anybody else would do by renting some elastic space in the cloud to take up the strain. They chose Amazon Web Services, which, although initially unperturbed by the move, yesterday removed Wikileaks' material without an explanation or apology. It appears Amazon came under political pressure to do so.

This raises big issues about First Amendment rights, but that aside, all businesses seriously need to consider this: In a idyllic future where we make heavy use of the cloud, what happens if a cloud service provider removes content it deems inappropriate, or just doesn't like?

What would a business do if this happened, bearing in mind that it could be tied into a service contract? Should the logistics of potentially sourcing an alternative provider be factored into any cloud migration plan? Indeed, should a business employ two cloud providers, used in parallel, with one kept as a strategic backup?

With questions like this, moving wholesale into the cloud is starting to seem a little naïve and hasty.

It boils down to what cloud providers consider to be objectionable material. Most service agreements are a little vague on this point, perhaps deliberately so. Amazon's Web Services Customer Agreement says the following, which is wildly open to interpretation and could theoretically let them remove just about anything:

Even if the service agreements were crystal clear about what is and isn't acceptable content, there will be many borderline cases that could fall either way. Anybody using cloud services could potentially be at the mercy of unaccountable arbiters within the organization.

I formerly worked at a magazine publisher that employed models for the cover photographs. Typically we'd receive the model's portfolio to take a look at via email, and often this would include nude photography. If that company had been working within a cloud environment, would storage of this material be objectionable?

Admittedly my example is specialised, but it's not hard to think of examples in other industries. Law firms frequently have to deal with extremely unpleasant materials as part of their work. Could they store horrific images and videos on a cloud service? Could they store potentially libellous materials?

Are cloud companies going to start making a distinction between storing materials that have a genuine business need (OK), and those that are stored solely for enjoyment (not OK)?

On the other hand, if cloud services do respect the First Amendment, would they be happy hosting content such as material for pedophilic Websites?

Where does their legal liability start and stop? Bearing in mind that cloud computing is a radically different prospect compared to simple Web hosting, will cloud computing need its own set of laws and regulations? Will the wise IT manager wait until various lawsuits have proved what is or isn't acceptable when it comes to the cloud?

The other issue raised is how easily cloud services will hand over material to government agencies when requested. Keeping a server computer within your premises allows property rights that prevent law enforcement getting their hands on it without significant hassle. How much hassle would law enforcement agencies need to go through to get Amazon to roll over?

Could law enforcement agencies deliberately cause disruption for a business by getting the cloud service to deactivate or suspect their account? It isn't hard to imagine, is it?

Encryption provides some solutions, of course, and no data should be stored unencrypted in the cloud. However, often there's a need to provide material to third parties in "clear" form. Yet a whole new set of questions about content is raised by encryption. Is objectionable content still objectionable when it's essentially a meaningless garble of data that makes sense only to somebody with a decryption key? Is a cloud service's ultimate legal defense going to be that it simply has no idea what's stored on its cloud?

There's a risk of navel gazing here, but following all logical and legal paths is something anybody involved in a migration to cloud computing will have to do. If not, they could be left very red-faced.

At the moment, it feels like we're at the beginning of the beginning of understanding the nature of cloud computing. Only the brave would dive in at this point in time.


More from Techworld

More relevant IT news


Send to a friend

Email this article to a friend or colleague:

PLEASE NOTE: Your name is used only to let the recipient know who sent the story, and in case of transmission error. Both your name and the recipient's name and address will not be used for any other purpose.

Techworld White Papers

Choose – and Choose Wisely – the Right MSP for Your SMB

End users need a technology partner that provides transparency, enables productivity, delivers...

Download Whitepaper

10 Effective Habits of Indispensable IT Departments

It’s no secret that responsibilities are growing while budgets continue to shrink. Download this...

Download Whitepaper

Gartner Magic Quadrant for Enterprise Information Archiving

Enterprise information archiving is contributing to organisational needs for e-discovery and...

Download Whitepaper

Advancing the state of virtualised backups

Dell Software’s vRanger is a veteran of the virtualisation specific backup market. It was the...

Download Whitepaper

Techworld UK - Technology - Business

Innovation, productivity, agility and profit

Watch this on demand webinar which explores IT innovation, managed print services and business agility.

Techworld Mobile Site

Access Techworld's content on the move

Get the latest news, product reviews and downloads on your mobile device with Techworld's mobile site.

Find out more...

From Wow to How : Making mobile and cloud work for you

On demand Biztech Briefing - Learn how to effectively deliver mobile work styles and cloud services together.

Watch now...

Site Map

* *