←back to thread

873 points helsinkiandrew | 1 comments | | HN request time: 0s | source
Show context
codeulike ◴[] No.45373831[source]
“I want to note our appreciation for the reporting of the Guardian,” [Microsoft’s vice-chair and president, Brad Smith] wrote, noting that it had brought to light “information we could not access in light of our customer privacy commitments”. He added: “Our review is ongoing.”

Its interesting that they seem to be saying they dont know the full details of how their customers are using Azure, due to privacy commitments.

replies(8): >>45374001 #>>45374241 #>>45374312 #>>45374319 #>>45374443 #>>45374448 #>>45374554 #>>45375003 #
Etheryte ◴[] No.45374312[source]
The whole point of confidential computing is that the cloud provider can't access your data and can't tell what you're doing with it. This is a must have requirement in many government contracts and other highly legislated fields.
replies(3): >>45374562 #>>45374812 #>>45380298 #
IlikeKitties ◴[] No.45374562[source]
I've personally never seen anything requiring confidential computing in anything. Is this required in the USA? I find that hard to believe, because the technology on a cloud level is still very beta-feeling. I think that Microsoft just never looked because they did not want to know.
replies(2): >>45375859 #>>45378681 #
hnlmorg ◴[] No.45375859[source]
They have services literally dedicated to things like health data records.

But you don’t even need to go that sensitive, literally any type of online service might run the risk of handling PII. Which is why CIS, NIST et al have security frameworks that cover things like encryption at rest.

replies(1): >>45376182 #
IlikeKitties ◴[] No.45376182[source]
But encryption at rest is not confidential compute. And Confidential compute is pretty new in terms of tech and i would be genuinely suprised if it's already required for some stuff. I am genuinely interested though, if you have any links about it please enlighten me.
replies(1): >>45383551 #
1. hnlmorg ◴[] No.45383551{3}[source]
Ahhh I hadn’t realised that was a new term. I’ve got something new to learn. Thank you