Chinese Clouds Move In: The Data May Be Wonky But the Message Is Clear
August 12, 2020
I am not a big fan of data generated by mid tier consulting firms. I call these outfits azure-chip consulting firms. Overall these firms are not able to attract and retain the type of individual who works at Bain, BCG, Booz Allen, and McKinsey. That’s a generalization, but it is one with which I am comfortable.
I read “Amazon Continues to Dominate Global IaaS Market: Report.” The data come from the estimable outfit Gartner, and the report involves real numbers. Some of the Gartner reports are what I would call subjective, but this report includes percentages.
The main point is that Amazon is the Big Dog for infrastructure as a service. The idea is that instead of have hardware in a closet and a couple of pizza eaters on the payroll to maintain the gear, one uses the cloud. It is magical and, best of all, does not involve capital expenditures and those pizza lovers.
The Gartner study explains that Alibaba, Amazon, Google, Microsoft, and TenCent dominate the market. That means Hewlett Packard and IBM are doing what they know how to do: Disappoint in fast growing market sectors.
The write up states:
These top five providers accounted for 77% of the total market in 2018, and in 2019 this number swelled to 80%. Throughout all IaaS providers in the market, 75% saw growth in 2018.
Okay, but to DarkCyber the main point is that two Chinese companies are now nosing into territory once dominated by US firms. As in the artificial intelligence market, the increased presence and success of these outfits from the Middle Kingdom is the big story. Even with squishy numbers, the change is evident.
Stephen E Arnold, August 12, 2020
Softies and SASers Team to Deliver Bigly Solutions
July 24, 2020
Microsoft and SAS are two of the biggest names in technology. They have decided to combine their powers to form a strategic, technological partnership. IT-Online shares the news in the report, “SAS, Microsoft Partner On Analytics And AI.”
SAS specializes in analytics software, while Microsoft popularized the personal computer. With this new partnership, their customers can expand SAS business solutions across Microsoft’s veritable product array. This specifically means:
“As part of the partnership, the companies will migrate SAS’ analytical products and industry solutions on to Microsoft Azure as the preferred cloud provider for the SAS Cloud. SAS’ industry solutions and expertise will also bring added value to Microsoft’s customers across health care, financial services and many other industries.”
The ultimate goal for Microsoft and SAS is to bolster their bottom dollar, but both clientele sets will gain many advantages. SAS will have easier access to the cloud and Microsoft gains access to powerful analytics software. The analytics software is of particular interest for Microsoft, because they want to integrate SAS technology into Azure and Dynamics 365 for new solutions.
Is this Cloud babble? You know: Blah, blah, flexibility. Blah, blah, scalability. It is a fancier way for both companies to enrich their product offerings for large organizations with inertia and a desire to move to the future of computing. Too bad Amazon.
Whitney Grace, July 24, 2020
The Cloud Becomes the New PC, So the Cloud Becomes the Go To Attack Vector
July 24, 2020
Cloud providers are not Chatty Cathies when it comes to some of their customers’ more interesting activities. Take malware, for example. Bad actors can use cloud services for a number of activities, including a temporary way station when deploying malware, delivering bogus or spoofed Web sites as part of a social engineering play, or just launching phishing emails. Major cloud providers are sprawling operations, and management tools are still in their infancy. In fact, management software for cloud operators are in a cat-and-mouse race. Something happens, and the cloud provider responds.
“Hackers Found Using Google Cloud to Hide Phishing Attacks” provides some information about the Google and its struggles to put on a happy face for prospects and regulators while some Googlers are reading books about dealing with stressful work.
The article reports:
Researchers at cybersecurity firm Check Point on Tuesday cited an instance when hackers used advanced features on Google Cloud Platform to host phishing pages and hide them. Some of the warning signs that users generally look out for in a phishing attack include suspicious-looking domains, or websites without a HTTPS certificate. However, by using well-known public cloud services such as Google Cloud or Microsoft Azure to host their phishing pages, the attackers can overcome this obstacle and disguise their malicious intent, improving their chances of ensnaring even security-savvy victims…
What’s the fix?
Obviously vendors of cloud management software, hawkers of smart cyber security systems, and bright young PhD track cyber specialists have ideas.
The reality may be that for now, there is no solution. Exposed Amazon S3 buckets, Google based endeavors, and Microsoft (no, we cannot update Windows 10 without crashing some machines) Azure vectors are here to stay.
Perhaps one should tweet this message? Oh, right, Twitter was compromised. Yeah.
Stephen E Arnold, July 24, 2020
And Microsoft Wants Its Partners to Support Government Entities?
July 16, 2020
The article “Hack of 251 Law Enforcement Web Sites Exposes Personal Data of 700,000 Cops” troubles me for two reasons.
First, the loss of the data increases risk for the professionals listed in the data files. Not good.
Second, the write up asserts as “real” news:
All of the hacked websites were hosted and built by the Texas web development firm Netsential on Windows servers located in Houston. They were all running the same custom (and insecure) content management system, developed using Microsoft’s ASP.NET framework in the programming language VBScript, using Microsoft Access databases. Because they all run the same software, if a hacker could find a vulnerability in one of the websites that allowed them to download all the data from it, they could use that vulnerability to hack the rest of the websites without much additional effort.
DarkCyber believes that much of the 21st century cyber software jabber is marketing speak.
If the statement about Microsoft’s infrastructure and software is accurate, there are some questions to answer:
- How did the Microsoft partner program allow “experts” certified by Microsoft to create a system with some interesting security issues?
- Where did the Netsential Web site go? Why did its content disappear?
- What does this incident mean in the context of the Department of Defense JEDI contract?
DarkCyber is concerned when a giant corporation cannot update its own Windows 10 operating system and fail to ensure that its partners are qualified to perform sensitive work in a careful manner.
Is there some useful code on Microsoft Github? Snap. Github fell over again just as I was looking.
Another troubling US technology lapse it seems for a company wanting to provide cloud services to the US government and law enforcement.
Stephen E Arnold, July 16, 2020
Cloud Pricing: Humor and Insight
June 22, 2020
We are putting the finishing touches on my Amazon Policeware lecture for the upcoming cyber crime conference. This particular talk has to be pre recorded. Why? Not sure, but creating a program is more difficult than lecturing from a stack of note cards.
I do include a brief reference to cloud pricing. I think there are some important truths in Amazon AWS pricing with regard to the company’s reinvention and reapplication of IBM’s old-school lock in strategy.
The write up “The Three Fs of Cloud Pricing” presents one facet of the Bezos bulldozer’s approach to policeware vendors and ultimate customers. Based on my DarkCyber team’s research, drgriffin is putting horseshoes on the iron stake.
If you have a “stake” in AWS cloud technology as a partner, ultimate customer, start up AWS user, or any of the other category of players in the Amazon forest, you will find the drgriffin write up information.
Here’s a snippet, but read the original, please:
Allowing people to play with the product for free was good for customers. But it was even better for cloud adoption. The free tier was part of their strategy of selling IT infrastructure directly, without having to go through finance and executives.
Remember that Google sought to circumvent information technology professionals. The attitude was, “You are a problme, and if you were any good, you would work at Google. Since you are NOT at Google, therefore, you are useless.”
Amazon, to cite one example, has taken a different approach; that is, the free tier. Don’t contraband vendors use a similar tactic?
Stephen E Arnold, June 22, 2020
Who Loves the Cloud More? Vendors, IT Pros, or Bean Counters?
June 15, 2020
Cloud systems are still considered high tech upgrades for organizations, but IT professionals prefer and view them as SOP says the IT Brief article: “Over Half Of IT Pros Prefer Hybrid And Multi-Cloud Architectures-Report.” Denodo conducted a survey and discovered that 53% of the IT professional respondents favored hybrid and multi-cloud architectures. The data is consistent with deployment statistics indicating that 42% of current cloud systems are hybrid configurations.
One of the biggest complaints from the respondents were cloud security and governance, but overall they preferred cloud because they can build up resiliency, cherry-pick features, and diversify skills.
More organizations are turning to the cloud to host their systems:
“Over the past year, there has been a positive reinforcement of cloud adoption with at least a 10% increase across beginners, intermediate, and advanced adopters.
Amazon Web Services (AWS) and Microsoft Azure jointly hold a huge 90% of the new-entrant market, according to Denodo.
But users are not just lifting their on-premises applications and shifting them to either of or both of these clouds; more than a third (35%) said they would re-architect their applications for the best-fit cloud architecture.”
BI, analytics, data science, and data warehousing are top priorities for cloud developers. While cloud systems are favored, data integration poses the biggest challenge for organizations. Security is up there too. Cloud systems are perfect for the way technology is shifting to more mobile devices, but total reliance on the cloud is not advised. Outages at Amazon and IBM suggest that a hybrid system that includes on-site capabilities will protect an system when the magical Internet loses some of the 24×7 LED signs posted on the information super highway.
Whitney Grace, June 15, 2020
Many Internets: Fragmentation Gains Momentum
June 8, 2020
The idea of one big digital ocean appealed to some. Now doubters are doing more than grousing at the bowling alley. GAIA-X which surfaced a couple of years ago is chugging along. Slow but steady is the catchphrase. “Legal Entity for Gaia-X Established, European Cloud Platform Now Official” explains:
The first steps to the creation of the European cloud computing platform Gaia-X have been taken, with the creation of a legal entity in Belgium. Set up to address Europe’s dependence on American or Chinese cloud providers, 22 French and German companies, with the backing of several countries, have agreed to launch the joint venture.
The US and some of its big cloudy monopolistic-oriented companies are not on the invitation list. The write up includes diplomatic-type statements. The intent is clear: Independence from US vendors and control of the cloud computing environment in Europe.
Now how does sending email work again? Eurocrats are not into the Wild West approach practiced out West it seems. The fancy talk may mean, “Tie that bronco up out back and wait until GAIA-X lets los americanos in the digital café.”
Stephen E Arnold, June 8, 2020
Amazon AWS Translation Notes
May 26, 2020
DarkCyber wants to say, “Good job” to the person who assembled “Amazon Web Services.” The write up is a list of more than 160 AWS services. Each service is identified by the often wonky Amazon name and followed by a brief description. The list is a medieval gloss for a 21st century cloud vendor’s service, product, frameworks, and features. The monks who compiled Psychomachia of Aurelius Prudentius would be envious.
Amazon wants to offer something for everyone, and as the company has emitted services, coherence has been a casualty. Worth downloading and tucking in one’s “We Want to Be Number One” folder. I assume a mid tier consulting firm or a WFHer will put the list into Excel and indicate which of these AWS offerings are available and mostly working from competitors like Google, IBM, and Facebook.
Stephen E Arnold, May 26, 2020
Zoom to the Oracle
April 30, 2020
One Dolphin Way is flipping with excitement. DarkCyber spotted “Oracle Wins Cloud Computing Deal with Zoom as Video Calls Surge.” From the truthy real news outfit DarkCyber learned:
Zoom and Oracle did not disclose the size of the deal, but said traffic for “millions” of meeting participants is being handled by Oracle’s cloud service and about 7 million gigabytes of Zoom data per day is flowing through Oracle servers.
With a nifty new computer security wizard providing advice, Zoom is taking steps to become a more reliable outfit. (Never mind that the security wizard was on watch when the unfortunate Yahoo and Facebook glitches took place. It is the PR that counts.)
Will Oracle deal with the Zoom feature of disallowing connections?
What’s interesting is that Oracle is working overtime to gain traction in what looks like a two horse race: Microsoft Azure on the outside and the Bezos bulldozer’s AWS on the inside rail.
Worth watching; that is, if one can connect to a meeting.
Stephen E Arnold, April 30, 2020
HPE Signals That Its Channel Partners Cannot Move Product and Services
April 27, 2020
I was not surprised when I worked through “HPE Outlines Additional Channel Partner Relief Measures.” The language of the write up worked overtime to dodge the basic message: Channel partners cannot move HPE’s products and services.
This is a surprise?
The write up explains:
The HPE Partner Ready program has suspended revenue target thresholds so partners can keep their eligibility for the 2021 program, as well as Aruba’s Partner Ready for Networking Program.
and this:
HPE Financial Services has also allocated $2 billion towards helping customers and partners. Initiatives include providing liquidity for buying partners, virtual solutions for partner enablement, and hybrid IT solutions for partners and customers.
or this:
HPE aims to provide liquidity to partners, particularly in North America and Europe through early pay discount terms and factoring terms. The company has not stated whether these also apply to Asia Pacific partners. The company has also suspended or reduced strategic development initiative targets in most geographies – however, this incentive does not apply to partners in Asia Pacific and China (APAC). Hybrid IT solutions for partners and customers include the free-of-charge use of remote server management Integrated Lights-Out Advanced. It will be offered free for the remainder of 2020. Additionally, HPE is working to support service provider partners by providing increased business continuity services to customers, via a centralised Spotlight page on Cloud28+.
The angles of this particular nine-ball pool game are challenging.
But taken as whole cloth, the moths appear to be ruining the fabric in which HPE wanted to craft a new prom gown.
What will the HPE partners’ wear? Maybe Amazon AWS or Google Cloud t shirts?
Stephen E Arnold, April 27, 2020
-
- Subscribe to Beyond Search
Feature archive
News archive
-
