With WikiLeaks, Amazon shows its power over customers
Don't mistake cloud providers for the Swiss; they aren't neutral
Computerworld - WASHINGTON - Amazon is a prominent company in the U.S. Its cloud servers host the U.S. government's Recovery.gov stimulus spending Web site, and it is competing for even more federal business. It also spent about $1.5 million this year on lobbying in Washington, according to OpenSecrets.org.
So when U.S. Sen. Joseph Lieberman (Ind.-Conn.), chairman of the Homeland Security and Governmental Affairs Committee, called Amazon officials this week to complain about the company's decision to host WikiLeaks on its cloud servers, Amazon quickly pulled the plug.
WikiLeaks, which earlier this week made public a huge collection of confidential U.S. State Department diplomatic cables, had moved to Amazon's service on Monday after it was hit with aggressive denial-of-service (DoS) attacks. The DoS attacks took the site offline for several hours on Monday and hammered it again on Tuesday.
After the Amazon move, a Swedish firm, Bahnhof Internet AB, in Uppsala, began hosting the WikiLeaks site. Amazon officials did not respond to requests for comment.
Not surprisingly, WikiLeaks has few friends in Washington. It's been criticized by the White House, the Pentagon, the State Department and by members of Congress for disseminating leaked government documents. But Amazon's action to abruptly cut off the site raises broader concerns about the power cloud providers have over their customers.
Robert Scott, managing partner at Scott & Scott LLP, a Dallas-based law firm that advises clients on IT contractual issues, said Amazon's cloud contract allows it to terminate hosting deals for cause and -- at its sole discretion -- anything it thinks is illegal, constitutes a regulatory violation or infringes on a third party's rights.
It was those terms that likely put the company on firm ground for taking action against WikiLeaks, said Scott. But those same terms could also be applied in less egregious situations, such as during a licensing dispute. It is "way too much power" to give a vendor "complete and sole discretion as to whether or not your content or your applications are up or not," he said.
"I look at this situation as a wake-up call [about] some of the risks that are inherent when entering into a cloud contract," said Scott.
Such contracts "give the provider of these cloud services a lot more discretion than you would ordinarily negotiate with someone who is merely providing you with access to servers that you use to store your data," said Jeffrey C. Johnson, a partner at Pryor Cashman LLP in New York who works in the law firm's intellectual property group.
- Hackers steal user data from the European Central Bank website, demand money
- Arrests made after international cyber-ring targets StubHub
- SQL injection flaw opens door for Wall Street Journal database hack
- Goodwill Industries probes possible payment card breach
- Aloha point-of-sale terminal, sold on eBay, yields security surprises
- The biggest data breaches of 2014 (so far)
- Blue Shield discloses 18,000 doctors' Social Security numbers
- PF Chang's says breach was 'highly sophisticated criminal operation'
- Breaches exposed 1 in 7 US debit cards in 2013
- New malware program targets banking data
- Accelerating Cloud Deployment and Operations with Managed Services Companies that do not have sufficient in-house expertise to either deploy or maintain an IaaS cloud should turn to Managed Service Providers .
- Rethinking IT Operations in the Cloud This paper breaks down the challenges that often prevent the cloud from delivering the fast, flexible and affordable infrastructure companies seek - and...
- Gartner Magic Quadrant for Cloud-Enabled Managed Hosting, North America Cloud-enabled managed hosting brings cloudlike consumption and provisioning attributes to the traditional managed hosting market
- Clearing the Network Hurdle to Cloud Deployment Although enthusiasm is high among IT pros for cloud services, an IDG Research Quick Poll survey found that, in fact, the cloud is...
- Why Are Customers Really Deploying an NGFW? It seems every IT Security expert is talking about the NGFW, but what are people really doing? This webcast covers 5 real-world customer...
- ElectricAccelerator: Dramatically Faster Builds and Test ElectricAccelerator dramatically speeds up builds and test by parallelizing jobs across clusters of physical or cloud CPUs. All Cloud Computing White Papers | Webcasts
Our new weekly Consumerization of IT newsletter covers a wide range of trends including BYOD, smartphones, tablets, MDM, cloud, social and what it all means for IT. Subscribe now and stay up to date!