The Cloud Is a Lie

John Kheit

| Devil's Advocate

Page 2 – Poof Goes Your Music, Backups, and Cloud-Reliant Hardware

Poof’d goes your music

The latest trend in eroding ownership of data comes from streaming music, e.g., Apple Music and Spotify.  In the guise of music discovery, this shift into music rentals is a careful weening of people off the concept of owning their own music or data.

Streaming music, in some ways, becomes the gateway drug to getting you to accept that you don’t own any data, but that your data is instead the product. And one day, when you have too many playlists invested in a service, you will discover the same pain all cloud services deliver. You’re stuck with that service if you want access to the data you created. If that service shuts down, you’re likely SOL in getting your own data out.

Just like Apple’s Ping, Microsoft’s Zune, Samsung’s Milk, Rdio, Grooveshark and other services, so, too, will these current streaming services one day die. At the end, you’ll have nothing to show for it. And if you think Zune and other DRM services aren’t cloud services, try to play those DRM tracks; they won’t play because the DRM authorization service required to play those now useless tracks was a cloud server that is no more. Also, good luck getting your carefully crafted playlists out of one service, and working in another service; all that invested energy in curating rented music goes down the drain.

But music is mostly meaningless compared to the other more valuable data you have up in the cloud.

Poof’d goes your online stored/productivity data/backups

So you thought it was a good idea to back up all your most sensitive data to the cloud? You pleb. What do you think happens with all that backed up data when your service provider goes belly up?  You hope the providers give you time to get your data out and securely delete it from their servers. At the very least, you hope service providers just delete it.

But if you look up on the list, you’ll see that some providers simply turned off their services. Users no longer had access to the data they uploaded, no easy data migration out of such services, nor could they delete that data.  Other services went out of business, and who knows where that data lands as assets go through the bankruptcy process.

Poof’d goes your cloud reliant hardware

What happens when your hardware depends on a cloud service that shuts down? The hardware becomes a brick. Take the Coin 2.0 credit card, a little plastic card that can load in up to 8 of your credit cards so you only have to carry the one Coin card. It’s useless now since it can’t contact its cloud server that recently shut down.

The Nest Revolv smarthome hub is a brick without a cloud server. Things like eero WiFi routers and other Internet of Things (IoT) devices that have to call a cloud server may become useless bricks once their wiretap connection goes dead with its cloud server host.

Have fun building your house with a ton of IoT devices that may go belly up with the ‘off’ switch of a cloud server. And beyond the boat anchoring of IoT devices, there are the tons of data generated by them. How many people are in your house, when you opened your fridge, when you went to the bathroom. All that data—not owned by you—will no doubt be lovingly cared for. Because nothing is more trustworthy than oversight of your most intimate data by a now defunct cloud service provider.

Next: Poof Goes Your World and Your Security, and Digital Serfs

28 thoughts on “The Cloud Is a Lie”

  • https://hardware.slashdot.org/story/21/03/15/2023254/cricut-decides-to-charge-rent-for-people-to-fully-use-the-cutting-machines-they-already-own

    Cricut Decides To Charge Rent For People To Fully Use the Cutting Machines They Already Own
    “Probably the best known brand of cutter comes from Cricut, and that company has dropped a bombshell in the form of an update to the web-based design software that leaves their now very annoyed users with a monthly upload limit of 20 new designs unless they sign up for a Cricut Access Plan that costs $9.99 on monthly payments. “

  • John:

    I think you’re right. We’re agreeing past each other.

    I had not appreciated the important distinction in your argument of ‘reasonable expectation’, and concur with that; thus my examples with a binary expectation of ‘dead’ or ‘alive’ was not apt.

    Thanks for the clarification.

  • Wab95, you make a lot of good points but we still disagree.

    Deleting on your drive is not a promise that it’s unrecoverable. Now if secure delete left your files recoverable (because apple just didn’t bother to actually secure delete the files) that would be different. Here, a company set out policy that people rely on. I’m pretty sure this is an oversight, but that’s exactly my point. The cloud is full of these “oversights” because frankly, the people that manage them are in best case ‘human’ most likely just don’t care about your data like you do, or sadly, in many case creeps that mine your data for less than honorable purposes. Perhaps we are agreeing past one another, but I see things differently between “here, have at this, no representations made, vs, we are representing a certain behavior (yet note even living up to that.”

    And you are stretching things (I approve 🙂 to make a point, but the examples I gave of failed cloud services weren’t ‘stretched’ beyond reasonable exceptions. Yes, a secure wipe would require over 30 passes on a hard drive; it requires only a single overwrite on an SSD however. So while true, secure wipe (I’m guessing on OS X is either one or 3 overwrites and not 30) but in that case you’re stretching things to the point people have to get out an electron microsope to recreate your data. So by most reasonable standards, the company can be fairly viewed as doing a decent job to live up to most reasonable people’s expectations.

    Not so with the cloud services, turning off the service and killing all your data is not what most reasonable people would expect. That’s part of the point of the article, is to bring awareness of just how far off the services behave and treat your data from what many reasonable people would expect. And your other field examples are also going, IMO, beyond reasonable expections. One expects seat belts to help you in a crash, no one expects to survive a Thelma & Louise drop off a cliff with their seat belts. Countered with the examples I gave on the cloud, I’d argue almost everyone of them go against what the reasonable person would expect. No one expects their Coin 2.0 card to be useless less than a year after getting it because the cloud server dies. No one expects that all the music they bought suddenly is going to be inaccessible. No body expects all the data they put into a document management system becomes inaccessible and not exportable. So relying on the edge cases elsewhere, and comparing that reasonable expectations on the cloud side, IMO is a bit apples and oranges. Of course, YMMV.

  • John:

    At the risk of starting a flame war, which I am not attempting, and which I think you’re above in any case, let me use the Apple Notes deleted data recovery piece, which you cite, as an illustration of why the cloud is not a lie in my view; merely a very human, and therefore imperfect, creation. I pose this as food for thought in the wider context the process by which technology, and life writ large, improves. I do this because I think you’ve raised an important topic with broader relevance beyond that of the cloud.

    To argue that, because a file deleted on a cloud service can still be recovered long after it has been deleted proves that the internet is a lie is to argue that, because a file deleted from your computer hard drive – even when you use the secure delete option – can still be recovered by law enforcement or spooks using forensic tools, personal computing is also a lie. Tech companies are lying to you when they lull you into the belief that you’ve deleted your files. Or that, when a tech company provides a security patch to your OS, if security the OS can still be breached by bad guys, be they criminals, state actors or otherwise, then OS security – indeed operating systems – certainly their purported security, are a lie. It follows then that if one is searching the web in stealth mode or using a VPN, and a determined actor or agency can still uncover your searches or capture your searches in real time, then web privacy or perhaps the entire web is a lie.

    Indeed, this line of reasoning can be (and has been) applied to whole other industries, and in my view, is no more true in those instances than in this one. If one uses seat belts and air bags in a car, and is subsequently involved in an accident that results in injury or death, it doesn’t prove that these safety devices are a lie. The fact that one can use preventive health services, and studiously follow recommended good health practices, and still succumb to an acute or even chronic illness does not prove that preventive health services are a lie. If one has state of the art surgical excision, chemotherapy and radiation for a cancer, and then 5 years later that cancer returns and results in death, it does not prove that cancer treatment is a lie.

    In all of these cases, the only thing proved is that these services and disciplines are limited, and can be defeated by what we have not anticipated or to which our current state technology cannot effectively respond. This is the realtime natural selection, or Darwinian forces if you will, at play; an arms race played out in both the natural world and the digital world, between predator and prey. If the prey gets faster, the predator adapts by having greater endurance (canines) or switching tactics altogether and going for ambush (felines). Every adaptation is met with a countermeasure in an endless evolution driven by competition for fitness and a competitive edge. In the end, however supremely adapted or fit, those adaptive defences whether natural or manmade can still be defeated by overwhelming force or the unexpected or previously never encountered.

    A cynic can argue that, therefore, all life and existence is a lie or a sick joke (they have throughout recorded history). Alternatively, one can take the Darwinian angle and, correctly in my view, observe that this is the process by which we either become more fit and evolved, or perish. We’ve already seen this in the digital world with hardware, OSes and apps. Can they still be defeated? Sure they can, and are. Everyday. Is it a surprise that this should apply to the still newer industry of cloud computing and services? Hardly. Indeed, one should expect an infant industry to struggle, as do organic infants, with fighting off assaults to which their adaptive immunity is immunologically naive and immature.

    Underlying each of these examples is the hard truth that it is only by the process of engagement, and a willingness to use and ultimately expose the limits of the imperfect that we are led to the next stage of a superior solution. Non-engagement, which a cynical view could encourage, is an evolutionary dead end. NB: I’m not suggesting that this your recommendation. Rather, this is a caution against that conclusion.

    I also think it’s important to disaggregate questions around data security and those of ownership. These are two separate sets of vulnerabilities, which although they can have some overlap, are nonetheless distinct issues that will require distinct adaptive responses. Because we are a species that values our survival (individuals may vary in their will to survive), and we are still in the early days of our digital evolution, I have no doubt adaptive responses and countermeasures will resolve many of the specific issues we face today (like deleted files), and present us with yet new challenges.

    Ad infinitum.

  • AWH, ah! I see. That’s a good question. The problem is the variety of services make uniformity difficult to create and FDIC. Money is relatively easy, you just want it back if it goes poof’d. But I supposed that at least partially applies to your data. So, here are a few things that would be good for the cloud: having your data encrypted and non-actionable by anyone but you, companies being required to allow you to always get your data out and for you to delete it before they shut down, companies having to provide some sort of data export for any data you create (in both their native file format, and at least one interoperable format–at the very least, tab delineated data), device and software makers must provide you a local version of their server software so you can self host so your hardware devices can continue to work…

    Some of the above just does not sound realistic. Personally, I think the solution to the ‘cloud’ is to maintain your own data. Get your own ‘personal’ cloud like a synology box where you continue to own your data and manage it. You’ll see that many of the most tech literate people do exactly this.

    WAB95, we disagree. Just because something is here to stay, doesn’t make it truth…politics are also here to stay, but often there is little truth involved. As for obselecnce, you make a good point, but many cloud companies and services are operated on whim and caprice; i would argue many mac users have laptops that are older than the half life of most of the cloud services in the above list. As for a demographic change that might change our laws (e.g., reverse clickwrap laws that give away your data, require encryption and some of the things I noted above), well it could happen, but in the mean time, you have to survive 20+ years (and frankly, I won’t hope for a good change to be a come’in, but I’m an old cynical bastard). 😀

    The cloud is a lie. IMO, you ignore that at your peril. That said, I do think personal cloud/server solutions are the answer here. Just like Apple made personal backup brainless with TimeMachine, I think they could do the same for personal cloud services. Synology is a step in that direction, although it’s a bit too techy for grandma, it shows promise. A company like Apple could take the Synology UI and experience to a new level that would let people provide themselves at least some of these basic cloud services with little knowledge.

    I can imagine many/most iCloud services being run as apps on a synology service, and all the user has to do is turn on the ‘on’ switch like they do with TimeMachine, and your data goes to your own personal cloud server, instead of up to apple’s servers.

    Thank you both for your very thoughtful comments, you’ve really helped advance the topic and made me think a good bit more on the issues… Much appreciated!

  • John:

    You’ve made an excellent argument about two things, that: 1) one should not become complacent about any single data storage or backup option, particularly one that is proprietary and subject to competitive market forces, but that we should regularly, proactively manage those options, and; 2) given the current state of technology and law, companies (cloud services or otherwise) can abuse your privacy, compromise your security and do you untold harm. Agreed.

    Neither of these excellent and well-aimed arguments, however, prove or even suggest that the cloud is a lie. Indeed, the cloud is a clear, present and future reality. It will only be replaced by something more capable in granting us convenient access to data, otherwise it’s here to stay. The cloud is truth.

    Certainly, the assumption that a particular service is permanent, or that cloud-based services overall cannot be compromised by mismanagement or malfeasance, is dangerous and unfounded.

    Regarding hardware obsolescence, the cloud is not the only brick factory. The relentless advancement of technology is assaulting our stable of devices from every side, and compelling us to (gasp) read, stay current on emerging options and upgrade to newer solutions. As one who is required to maintain paper records on clinical trials that are subject to FDA approval for up to 15 years, I can tell you that not even paper is safe from degradation and loss, and is very costly to preserve. I’ve even had CDs get eaten by tropical bugs; go figure. Any stored file that is not being actively managed is toast; it’s just a matter of time. That’s no exoneration of the cloud service mismanagement (customers should always be given a heads up and the opportunity to retrieve their data); merely a reminder that cloud-based options operate in an environment of ‘laissez faire’ capitalism. What could possibly go wrong?

    Your point about consumers being acclimatised to a lack of data ownership and to digital serfdom, I think you’re absolutely correct that this is the value proposition on offer particularly from business models that make us the product. We don’t have to accept the offer. Unfortunately, not enough push back is happening from consumers, a critical mass of which are people too young to have assets that they yet value protecting. Transitions theory and observation suggests that this will change in time as this population ages and assumes greater responsibility and risk, just as boomers who once wanted nothing to do with ‘the system’ are today’s most vocal advocates for entitlements. Until a critical mass demand a change in this relationship, there is little incentive for it to change.

    The remaining piece of this is law. Legislators, without that public pressure, are unlikely to volunteer altering that balance of ownership, particularly in the absence, in the USA, of campaign finance reform. And while I would put little stock the latter happening anytime soon, history suggests that an inevitable demographic transition, commingled with the perception of unacceptable risk, will pressure that change, though probably not in time for this present generation of users. We’re on our own; providing us with not only risk, but the opportunity to shape that future. Personally, I relish that opportunity.

    In the meantime, the cloud, just like the truth, is out there.

  • That was kind of my point – what would be the equivalent of FDIC insurance for the cloud? Mandatory local backups of data? A Bill of Data Rights? Because we can rely on legislators to side with the little people, right?

    It’s no wonder people are reverting to analogue.

  • Well for one, your money is FDIC insured, and similarly so are your equities. Whereas many if not most cloud services operate not only with no such safety net, many seem to dangle your data by a thread over a pit of molten lava filled with fireproof lions and tigers and bears…

  • Thank you for such a well-researched piece – timely and necessary. But think for a moment – how is this any different from other ‘cloud’ services you’ve been using all your life? You work, you exchange your time and labour for some imaginary entity called ‘money’, which (unless you’re Captain Fantastic) you then keep it in a bank, or invest wherever. All the time it is nothing more than a string of bits held on some server somewhere or an entry in a ledger. And up until 2007/8 you never gave it a second thought. Why? Because trust in the financial industry is deemed essential to society and the industry is thus regulated, with governments guaranteeing ordinary people (up to a point) in the interests of keeping society running and preventing anarchy. And you would find it a whole lot more difficult to get things done without it.
    And the financial industry, in return for looking after our ‘money’, whatever that is, takes its cut by performing the essential function of lending that money out – not much different from cloud providers making hay off our data.

    So I guess my point is, isn’t it about time cloud services were regulated in some way so that our data remains our own and its integrity is guaranteed by law? No doubt vested interests will fight such a proposal tooth and nail. But surely as the cloud becomes more embedded in society’s day to day needs, governments have to wake up and provide a counterbalance to the one-sided interests of the cloud service providers. Or do we leave the net alone to be self-regulating? Seems to be working out just fine so far…

    I could go on, but I feel the need to check on my BitCoin wallet…

  • Wall Street has a different opinion of the cloud. It’s like any company that has cloud services has unlimited revenue potential. All Wall Street ever talks about is AWS. AWS this and AWS that. Amazon has hitched on to bottled lightning. It seems the only major tech company that isn’t going after cloud services is Apple. I’m really surprised Apple hasn’t tried to go after some cloud services if there’s so much unlimited revenue in that business.

    Listening to Wall Street, I honestly thought there was so much low-hanging fruit that was easily picked by any company with cloud services. It’s pretty obvious by now that AWS can’t possibly fail so in that particular case, I suppose the cloud isn’t a lie.

  • What about Cisco, Facebook, Symantec, Dell, Samsung, Microsoft. Were those not large enough companies that still pulled the plug on many of their cloud offerings (see the above list). Apple, beyond Ping, hasn’t had the most stellar history either: eWorld, iTools, .Mac, MobileMe (yes some of those morphed over, but lots of the services didn’t make it to iCloud).

    And, there is a difference between saying “The Cloud Is a Lie” and “never use the cloud.” The point is to give a bit of a red pill to the population about the cloud. But as always, YMMV!

  • There is some truth in this.
    But you’ve gone too far the other way.
    Yes music and software as service through the cloud is a bad deal. But using the cloud as ONE PART of your data strategy is a good thing. I use the cloud for backing up and sharing data, but also keep local copies of things.
    Also not all cloud services are prone to disappearing in the dark of night. I have no qualms about using iCloud because Apple is not likely to vanish. Apple also has the toughest security for their services of anyone. They are a totally different animal from Nervex or Cubby.

    Cloud services are like any other service, there are good operators and bad ones. Also they are good for some things and not for others despite what their sales departments say. I don’t think you can just reject them all for any use with a blanket “the cloud is a lie” statement. That’s a bit too luddite.

  • I can’t argue with any if this and have felt this way ever since cloud services were first announced. I don’t rely on them for anything but trivial, non-sensitive backups. I would further argue that an awful lot of, if not most of what tech companies are offering/planning/working on these days is similar hoodwinkery. They can pry my backup drives out of my cold, dead, fingers, and my personal files and data will never reside soley on their servers, if at all. Thanks for having the cojones to write this, John – exposing the emperor’s nakedness is not a popular stance at present.

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.