[Info-vax] The new world that VMS will be living in

[Bill Gunshannon]

On 12/7/20 8:25 PM, Arne Vajhøj wrote:
> On 12/7/2020 8:05 PM, Bill Gunshannon wrote:
>> On 12/7/20 2:40 PM, Jan-Erik Söderholm wrote:
>>> Den 2020-12-07 kl. 20:35, skrev Bill Gunshannon:
>>>> On 12/7/20 2:10 PM, Arne Vajhøj wrote:
>>>>> Deutsche Bank just announced that they have signed with
>>>>> Google to move most of their IT To Google cloud.
>>>>>
>>>>>  From the press:
>>>>>
>>>>> <quote>
>>>>> The two companies on Friday finalized a cloud computing agreement 
>>>>> under which the German lender plans to shift most of its data onto 
>>>>> Google servers, technology head Bernd Leukert said in a phone 
>>>>> interview.
>>>>> ...
>>>>> The deal will include “applications at the heart of our IT,” 
>>>>> Leukert said in an interview,
>>>>> </quote>
>>>>>
>>>>> This follow that Capital One closed down their last data center
>>>>> a month ago after migrating everything to Amazon cloud.
>>>>>
>>>>> VMS will need to function - and function well - in such new
>>>>> environments.
>>>>
>>>> Once you move your data to The Cloud it ceases to be your
>>>> data.  Hell of a way to run a business.
>>>
>>> So you do not have your savings at the bank either, right?
>>> Since it then ceases to be your money, if I understand you.
>>> And banks are a hell of a way to manage your savings.
>>
>> Another typical bad analogy.  If someone else knows the color of my
>> money it's still mine.
> 
> Yes. But putting money in the bank is a bit more.

My money in the bank is insured.  And it's existence is not a
valuable trade secret.

> 
>> Now, we all know how tightly protected the VMS Customer List has
>> always been.  With The Cloud you put it on another persons machine
>> under their control and relying on their security.  If it gets out
>> nothing can ever make it secure again.
> 
> Are you concerned that Amazon, Microsoft, Google etc. will
> get a list with 10-25% of VMS customers based on who runs
> VMS in their cloud and the list will leak??

Not Amazon, Microsoft or Google.  But how about that third shift
operator who thinks he should be earning a lot more than they pay
him?

And I was using the idea of VSI moving to the Cloud and thus
having their entire customer list in someone else's hands.
A theoretical example.  But it applies to pretty much any
major business and most minor ones.

> 
>>                                     Now, tell me, what exactly
>> has any Cloud Provider done to make me want to trust them?
> 
> Driven successful business for many years will convince
> many.

Many years?  Guess it depends on what you consider The Cloud.
Some papers say Mainframes were the Cloud back in the 60's.

> 
> It may not be enough for you?
> 
>> And that's only one aspect.  How about reliability?  How long can]
>> your business run if your Cloud Provider goes down?
> 
> How long can they run if their own data center goes down.
> 
> Same.

Yes, but if they have their own facilities they can ensure the
means to continue operations (spares, COOP Site, etc) exist.
Can the same be said (with any real trust!) about the commercial
Cloud sites?  And then we have something as simple as loss of
communications.  If you keep your datacenter on your own
premises the responsibility and the control is in your hands
and not in the hands of someone you may trust, but actually have
no reason to actually trust.

> 
>>                                                     What exactly
>> have they done to make you feel that t herfe is no chance of that
>> happening?
> 
> Regions, availability zones etc..
> 
> Cloud does not change the redundancy requirements - it just make it
> a bit easier and cheaper to meet them.
> 
> If it was necessary with 2 data centers with a certain distance between
> for on premise, then that is still necessary with cloud.
> 
>> And the list goes on and on.  If anyone did real Risk Analysis
>> before moving to the Cloud no one would.
> 
> You don't think Deutsche Bank did a risk analysis??

Sadly, my experience from when I was still doing this commercially
leads me to think that if real risk analysis was done it is very likely
that the conclusion was established before the actual analysis.

And that applies to much more than just The Cloud.

bill