With WikiLeaks, Amazon shows its power over customers
Don't mistake cloud providers for the Swiss; they aren't neutral
Computerworld - WASHINGTON - Amazon is a prominent company in the U.S. Its cloud servers host the U.S. government's Recovery.gov stimulus spending Web site, and it is competing for even more federal business. It also spent about $1.5 million this year on lobbying in Washington, according to OpenSecrets.org.
So when U.S. Sen. Joseph Lieberman (Ind.-Conn.), chairman of the Homeland Security and Governmental Affairs Committee, called Amazon officials this week to complain about the company's decision to host WikiLeaks on its cloud servers, Amazon quickly pulled the plug.
WikiLeaks, which earlier this week made public a huge collection of confidential U.S. State Department diplomatic cables, had moved to Amazon's service on Monday after it was hit with aggressive denial-of-service (DoS) attacks. The DoS attacks took the site offline for several hours on Monday and hammered it again on Tuesday.
After the Amazon move, a Swedish firm, Bahnhof Internet AB, in Uppsala, began hosting the WikiLeaks site. Amazon officials did not respond to requests for comment.
Not surprisingly, WikiLeaks has few friends in Washington. It's been criticized by the White House, the Pentagon, the State Department and by members of Congress for disseminating leaked government documents. But Amazon's action to abruptly cut off the site raises broader concerns about the power cloud providers have over their customers.
Robert Scott, managing partner at Scott & Scott LLP, a Dallas-based law firm that advises clients on IT contractual issues, said Amazon's cloud contract allows it to terminate hosting deals for cause and -- at its sole discretion -- anything it thinks is illegal, constitutes a regulatory violation or infringes on a third party's rights.
It was those terms that likely put the company on firm ground for taking action against WikiLeaks, said Scott. But those same terms could also be applied in less egregious situations, such as during a licensing dispute. It is "way too much power" to give a vendor "complete and sole discretion as to whether or not your content or your applications are up or not," he said.
"I look at this situation as a wake-up call [about] some of the risks that are inherent when entering into a cloud contract," said Scott.
Such contracts "give the provider of these cloud services a lot more discretion than you would ordinarily negotiate with someone who is merely providing you with access to servers that you use to store your data," said Jeffrey C. Johnson, a partner at Pryor Cashman LLP in New York who works in the law firm's intellectual property group.
- NSA used 'European bazaar' to spy on EU citizens
- Target CIO resigns following breach
- Evan Schuman: Mobile IT Roach Motel: Data checks in, but it won't check out
- Sears finds no evidence of data breach -- yet
- Gameover malware is tougher to kill with new rootkit component
- Mobile app for RSA Conference exposes personal data
- UK man charged with hacking Federal Reserve
- Bloomberg clamps down with data-access policies after scandal
- Amazon.com security slip allowed unlimited password guesses on mobile apps
- Huge turnout at RSA shows hackers are winning
- 15 Non-Certified IT Skills Growing in Demand
- How 19 Tech Titans Target Healthcare
- Twitter Suffering From Growing Pains (and Facebook Comparisons)
- Agile Comes to Data Integration
- Slideshow: 7 security mistakes people make with their mobile device
- iOS vs. Android: Which is more secure?
- 11 sure signs you've been hacked
- ESG: The IBM FlashSystem 840: Technical Evolution to Deliver Business Value In this whitepaper, you will learn how this high-speed storage technology has tremendous potential to support I/O-intensive and/or latency-sensitive applications.
- Choosing an MDM Platform: Where to Start the Conversation If you're in the early stages of choosing an MDM solution, or you're considering switching vendors, here are seven critical questions to ask...
- Axeda Platform Technical Overview This paper summarizes the major features of an IoT platform and explains how they simplify and speed the process of developing and deploying...
- Stock Shock: The effect of project and portfolio management on share price In this independent report, you'll see the intrinsic connection between long-term capital investment and short term market performance -- and how this can...
- Cloud Knowledge Vault Learn how your organization can benefit from the scalability, flexibility, and performance that the cloud offers through the short videos and other resources...
- PST Archiving: What is it and How is it Done? Learn more about what PST data is, the risks relating to it, and how the new PST Archiving feature in the Simpana 10... All Cloud Computing White Papers | Webcasts