With WikiLeaks, Amazon shows its power over customers
Don't mistake cloud providers for the Swiss; they aren't neutral
Computerworld - WASHINGTON - Amazon is a prominent company in the U.S. Its cloud servers host the U.S. government's Recovery.gov stimulus spending Web site, and it is competing for even more federal business. It also spent about $1.5 million this year on lobbying in Washington, according to OpenSecrets.org.
So when U.S. Sen. Joseph Lieberman (Ind.-Conn.), chairman of the Homeland Security and Governmental Affairs Committee, called Amazon officials this week to complain about the company's decision to host WikiLeaks on its cloud servers, Amazon quickly pulled the plug.
WikiLeaks, which earlier this week made public a huge collection of confidential U.S. State Department diplomatic cables, had moved to Amazon's service on Monday after it was hit with aggressive denial-of-service (DoS) attacks. The DoS attacks took the site offline for several hours on Monday and hammered it again on Tuesday.
After the Amazon move, a Swedish firm, Bahnhof Internet AB, in Uppsala, began hosting the WikiLeaks site. Amazon officials did not respond to requests for comment.
Not surprisingly, WikiLeaks has few friends in Washington. It's been criticized by the White House, the Pentagon, the State Department and by members of Congress for disseminating leaked government documents. But Amazon's action to abruptly cut off the site raises broader concerns about the power cloud providers have over their customers.
Robert Scott, managing partner at Scott & Scott LLP, a Dallas-based law firm that advises clients on IT contractual issues, said Amazon's cloud contract allows it to terminate hosting deals for cause and -- at its sole discretion -- anything it thinks is illegal, constitutes a regulatory violation or infringes on a third party's rights.
It was those terms that likely put the company on firm ground for taking action against WikiLeaks, said Scott. But those same terms could also be applied in less egregious situations, such as during a licensing dispute. It is "way too much power" to give a vendor "complete and sole discretion as to whether or not your content or your applications are up or not," he said.
"I look at this situation as a wake-up call [about] some of the risks that are inherent when entering into a cloud contract," said Scott.
Such contracts "give the provider of these cloud services a lot more discretion than you would ordinarily negotiate with someone who is merely providing you with access to servers that you use to store your data," said Jeffrey C. Johnson, a partner at Pryor Cashman LLP in New York who works in the law firm's intellectual property group.
- Michaels breach exposes nearly 3M payment cards
- Teen nabbed in Heartbleed attack against Canadian tax site
- Heartbleed bug can expose private server encryption keys
- FTC can sue companies hit with data breaches, court says
- 5-year-old hacks Xbox, now he's a Microsoft 'security researcher'
- State AGs probe Experian subsidiary's data breach
- NSA sniffing prompts Yahoo to encrypt traffic between its data centers
- Banks withdraw data breach claim against Target
- Bank abandons place in class-action suit against Target, Trustwave
- Banks' suit in Target breach a 'wake-up call' for companies hiring PCI auditors
- Cloud Computing eGuide In this eGuide, CIO, Computerworld, and InfoWorld offer advice, tips, news, and predictions regarding cloud implementations in the coming year and beyond. Read...
- Increase IT Performance from the Enterprise to the Cloud with WAN Optimization Massive consolidation and data mobility, enabled by virtualization, have radically altered how we build servers, design applications, and deploy storage for the emerging...
- IDC: Eliminate Shortcomings in Your Cloud Architecture with Smarter Storage This white paper demonstrates how IBM Smarter Storage provides customers with an ideal, proven platform for cloud computing. IBM has a differentiated storage...
- Radicati: Cloud Business Email - Market Quadrant 2013 Google was named the top cloud business email provider in a recent report by research firm Radicati. Out of 14 key players, Google...
- Cloud Knowledge Vault Learn how your organization can benefit from the scalability, flexibility, and performance that the cloud offers through the short videos and other resources...
- Video surveillance for IT: maximum image quality, minimum bandwidth Join us on Thursday, May 8th at 1 p.m. EST when Willem Ryan, Senior Product Marketing Manager at Avigilon, will discuss how IT... All Cloud Computing White Papers | Webcasts