this post was submitted on 06 Jul 2024
1 points (100.0% liked)

TechTakes

1432 readers
16 users here now

Big brain tech dude got yet another clueless take over at HackerNews etc? Here's the place to vent. Orange site, VC foolishness, all welcome.

This is not debate club. Unless it’s amusing debate.

For actually-good tech, you want our NotAwfulTech community

founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 0 points 4 months ago (3 children)

it's not airgapped, it's still cloud, it can't be. it's some kind of "secure" cloud that passed some kind of audit. openai already had a breach or a few, so i'm not entirely sure it will pan out

[–] [email protected] 0 points 4 months ago (2 children)

Iirc OpenAI uses Microsoft's cloud?

If so, MSFT has a special airgapped cloud specifically for USGov.

[–] [email protected] 0 points 4 months ago

tbh I personally wouldn’t expect/suspect this to be using any of the flavours of govcloud for mass-market flavours (because that has implications on staff hiring etc)

the easy way to handle this is to have a backend/frontend separation with baseline access controlled simply by construction of routing and zone primitives. it’s relatively simple (albeit moderately involved) to do this on most cloud providers

[–] [email protected] 0 points 4 months ago (1 children)

they probably do. I worked for a content-as-a-service company that had a contract to deliver our product, airgapped, to a three-letter agency on a regular schedule, and we were a tiny company. Microsoft's biggest customer is probably the U.S. government; I'd be shocked if they don't provide an in-house airgapped set of full Azure services for the entire intelligence agency system.

[–] [email protected] 0 points 4 months ago

They do. Source: I worked in at MSFT in Azure Identity. It's completely separate, has its own rollout schedule for all products, etc.

There's also a physically separate cloud for China 🙃

[–] [email protected] 0 points 4 months ago

I see you've never taken part in a FedRAMP audit. They're brutal.

[–] [email protected] 0 points 4 months ago

My interpretation of what they're saying is that it's on their own servers in their own location that can only be accessed from specific access points.

Talking about networks as airgapped isn't abnormal.