Welcome to DU! The truly grassroots left-of-center political community where regular people, not algorithms, drive the discussions and set the standards. Join the community: Create a free account Support DU (and get rid of ads!): Become a Star Member Latest Breaking News Editorials & Other Articles General Discussion The DU Lounge All Forums Issue Forums Culture Forums Alliance Forums Region Forums Support Forums Help & Search

Tasmanian Devil

(276 posts)
Wed Jun 17, 2026, 08:09 PM Jun 17

Clouds are insane



I think cloud computing is a giant mistake. The companies putting my data in their clouds cannot be trusted to keep it safe. And with essentially no consequences of failure, they just keep doing it over and over and over again.

Every day brings news of another data compromise. And the one from today is massive:

https://arstechnica.com/security/2026/06/massive-breach-spills-credentials-for-thousands-of-sensitive-networks/
Massive breach spills credentials for thousands of sensitive networks
The affected include Oracle, Lenovo, FedEx, a NATO contractor, and Fortinet.

Researchers have uncovered a massive breach of Fortinet firewalls that has given Russian-speaking attackers near-unrestricted access to some of the world’s largest and most powerful organizations, including Oracle, Chevron, Lenovo, Federal Express, a NATO defense contractor, and Fortinet itself.

Nearly 74,000 Fortinet devices from more than 21,000 IP addresses in 194 countries have been compromised and their plaintext credentials exposed online...


What's Fortinet? From Wikipedia:
Fortinet, Inc. is an American cybersecurity company headquartered in Sunnyvale, California. It develops and sells security products including firewalls, endpoint security and intrusion detection systems.


So 74,000 devices designed to secure companies from the net have actually been a gateway into compromising those companies.

Oh, and how was this discovered? Not until this guy broke into the bad guy's computer:
Bob Diachenko, a security researcher and head of SecurityDiscovery.com, said online and in an interview. He said he found the data after gaining access to the attackers’ command-and-control server and other infrastructure.


The cloud is just somebody else's computer, and they're incompetent idiots.

And no, AI isn't a magic bullet. The solution is to make companies liable for data breaches. They are trusted caretakers of your information and they won't ever be secure until there are consequences that are more expensive than a day-long media blip.

[Thanks for letting me vent, you can put me on ignore now!]
8 replies = new reply since forum marked as read
Highlight: NoneDon't highlight anything 5 newestHighlight 5 most recent replies
Clouds are insane (Original Post) Tasmanian Devil Jun 17 OP
Breaches are not a matter if "whether" but "when" usonian Jun 17 #1
Supply chain Tasmanian Devil Jun 17 #2
Larry Ellison knows what's going on. Kid Berwyn Jun 17 #3
K&R momta Jun 17 #4
As best I can, I store nothing in the cloud. Intractable Jun 17 #5
Good! Tasmanian Devil Jun 18 #6
"The cloud is just somebody else's computer, and they're incompetent idiots." GenThePerservering Jun 18 #7
The tech bros are making it difficult for us to buy our own fully capable computers... hunter Jun 18 #8

usonian

(27,174 posts)
1. Breaches are not a matter if "whether" but "when"
Wed Jun 17, 2026, 08:21 PM
Jun 17

Even open source provider Canonical is addressing the new and vastly expanded threats, thanks to Mythos (AI)

https://ubuntu.com//blog/responding-to-a-new-threat-landscape

They're having to use AI to combat the new AI threats.



Tasmanian Devil

(276 posts)
2. Supply chain
Wed Jun 17, 2026, 08:30 PM
Jun 17

And going after certificates is a boon to deploying malware in commonly used open-source software. Every company that does CI/CD without seriously checking their dependencies is at risk.

Instead of standing on the shoulders of giants, companies are going to have to start treating software they didn't write as a vulnerability.

Kid Berwyn

(25,505 posts)
3. Larry Ellison knows what's going on.
Wed Jun 17, 2026, 08:44 PM
Jun 17

“His” Oracle went from CIA to corporate global like that.

Intractable

(2,574 posts)
5. As best I can, I store nothing in the cloud.
Wed Jun 17, 2026, 11:41 PM
Jun 17

I back up my files solely to local hard drives.

A few years ago, when the well-known "last pass" was breached, I said, "That's it! No more. The cloud cannot be secured."

Notice how Google and Microsoft are always trying to trick users into using cloud storage. They want your stuff!

Tasmanian Devil

(276 posts)
6. Good!
Thu Jun 18, 2026, 12:04 AM
Jun 18

I will create encrypted disk images and copy those to the cloud for a backup. But I don't depend on any one of them to be there tomorrow and I certainly don't upload anything sensitive unencrypted.

For the many of you who think I'm silly, read up on Megaupload and the innocents that lost their files when the service was shut down: https://en.wikipedia.org/wiki/Megaupload

In other words: don't trust the clouds and if your data is in only one place, it’s not backed up!

I find it amazing that companies will use gmail and google docs to store seriously confidential information, unencrypted on the Google servers. If I was a hacker working for profit or the Russians, my goal would be to work for Google (or Amazon or Microsoft or Apple) to gain admin access to their clouds.

GenThePerservering

(4,097 posts)
7. "The cloud is just somebody else's computer, and they're incompetent idiots."
Thu Jun 18, 2026, 12:32 AM
Jun 18

Exactly. Try explaining that to people that 'the cloud' isn't anything but somebody else's server farm. But oh, no - they think it's some sort of nebulous ur-world where data floats around like molecules. One woman patiently explained to me that "No no...you can just grab something from here...from there..anywhere in The Cloud! It's the future of ecommerce!" (I'm a merchant by trade).

::head desk::

hunter

(40,947 posts)
8. The tech bros are making it difficult for us to buy our own fully capable computers...
Thu Jun 18, 2026, 03:10 AM
Jun 18

... and operate them outside of their clouds.

ALL the typical consumer crap computers and small business "solutions" are forcing users into the cloud.

The cost of building highly capable machines of our own that do not depend on cloud services is skyrocketing as all the latest technology is sucked up in the construction of new data centers. Anyone who is buying high end components to build their own computers will tell you that.

Are we tacitly giving up the right to run our own computers as we see fit independent of any "cloud?"

Why does everything have to be attached to the internet?

Latest Discussions»General Discussion»Clouds are insane