On 04/11/2024 15:30, Timo Hilbrink via members-discuss wrote: Last I checked, none of my interactions with the NCC nor anyone via any NCC mailing list nor RIPE ATLAS involved drug running, pedophilia, human trafficking or terrorism. For the purists, I would be more concerned about your Gmail or O365 mail and that rant you might have sent to a local neighborhood mailing list, or some off color or non-PC meme you shared via Whatsapp - all of which is being scooped up by ____ (fill in favorite spy agency). In the meantime, RIPE NCC is doing a fine job in the realm of moving services to the cloud. Regards, Hank
Hi all,
As we have seen in the past several Information Services updates from Felipe, the RIPE NCC has been moving a lot of services to the cloud, this now also includes things like RIPE NCC email, calendars, chat and video conferencing. The follwoing page gives a helpful overview of these services and the relevant cloud platforms:
https://www.ripe.net/publications/documentation/cloud-technology-status/
The page states that "all services pass an internal process of strict legal, information security, technology and privacy reviews". That all sounds very reassuring, doesn't it?
However..
Even though the "Data Residency" column states "EU" for all these services, these cloud providers are a U.S. legal entity (or a foreign entity with an office in the U.S.), so the data stored on these platforms completely falls under U.S. legislation, such as the CLOUD act and numerous related acts and laws. It is completely irrelevant where this data is stored geographically.
This also means that the data stored on these platforms can be subject to U.S. law enforcement warrants and subpoenas.
As a concerned and privacy aware citizen, i find it very worrying that basically all my interactions with the RIPE NCC in some way end up in the hands of U.S. based cloud providers. But i can imagine that these concerns are much more serious for RIPE members in countries that have a less favourable relation with the U.S. (there are quite a number of those countries within the RIPE service region)
What do other members think about this, and has the RIPE NCC taken these consequences into account when they decided to move all this data and services to U.S. based hyperscalers?
Thanks for your thoughts,
Timo Hilbrink Freedom Internet ----- To unsubscribe from this mailing list or change your subscription options, please visit: https://mailman.ripe.net/mailman3/lists/members- discuss.ripe.net/ As we have migrated to Mailman 3, you will need to create an account with the email matching your subscription before you can change your settings. More details at: https://www.ripe.net/membership/mail/ mailman-3-migration/