Security Flaws of Cloud Computing

When you hears about cloud technology, what comes to mind? Is it the cheesy Window's commercials? Or, better yet the grand idea of being able to access any of your files from wherever you please? While these concepts, among others, may come to mind upon first hearing the term "cloud" in a technical context, I am sure you didn't think of it as a great way to find the kid who stole your computer. However, one college student from Bentley University, named Mark Bao, was able to do just that using his cloud back-up program called Blackblaze. In short, Blackblaze is an online service that allows you to save any files you please onto it's server for $5/month.

What Bao did was set-up his cloud system so that anything he saves automatically goes to Blackblaze. This was convenient at the time, and then became the reason he caught the kid who stole his laptop. This is so because, once it was stolen, the thief kept unknowingly saving files to the cloud, leaving his e-mail address, files, and his name at the hands of Bao. Bao evidently reported the name, retrieved his laptop, and got plenty of revenge.

Not only does this event introduce a new way a cloud system can be used, it introduces indirectly addresses the security risks of the concept of cloud systems. One thing that seemed to shout out to me was how easily Kao was able to access the thief's files because he did not wipe the stolen computer well enough. This screamed out because the first thing that comes to mind is the security of having a used computer. The ease of Bao's accessing those files present the question of how easy it to do this same exact thing to someone who purchases a new computer? Hypothetically speaking, if the computer is not cleaned to the fullest extent, something that is completely plausible, then how safe is purchasing a used computer?

Also with respect to security, one of the key uses of a cloud system is to keep your files secure from being deleted and, more importantly, being accessed from other parties; especially in the event of a lost or crashed computer. This event actually questions the legitimacy of this security because if the thief was easily able to save to Bao's cloud drive, then he must have had the ability to access the drive. This presents the question: if someone was unintentionally able to have access to a cloud, then how severely can someone intentionaly trying to access a cloud drive attack someone's files.

While this story speaks to the benefits that a kid was able to reap from his cloud systems, I feel it actual presents some of the major flaws, particularly in the security aspect, of a cloud system.

Sources:

Hill, Kashmir. "To Catch a Computer Predator." Web log post. Forbes. 22 Mar. 2011. Web. 22 Mar. 2011. http://blogs.forbes.com/kashmirhill/2011/03/22/to-catch-a-computer-predator/.

http://www.backblaze.com