Freedom, security and the cloud
summary
Cloud hosting boosts utilization and lowers cost but adds layers of software and attack surface: hypervisors, QEMU, orchestration and management. Claims include a concrete QEMU array overwrite bug enabling hypervisor compromise, difficulty hotpatching hypervisors so providers rely on live migration workarounds that face CPU feature mismatches, and dangerous management paths like IPMI default passwords and writable firmware. Recommends public security policies, least-privilege API segmentation, frequent auditing, and open deployable stacks such as OpenStack on OpenStack to regain control and transparency.
AI-written summary · about
chapters (4)
related talks
41mSecuring Your Xen-Based Cloud
09mCloud Security and how to leverage the shared responsibility model to your advantage
48mSecurity today: change your habits and make it safer and efficient
45mUsing Linux Securely in the Cloud
48mControlling Clouds: Beyond Safety
01h 09mCloud Safeguarding: View from Cloud Providers
44mAdvancements in Confidential Computing
50mAvoiding cloud security anti-patterns the right way