"The case studies all use words like "secure", "MD5", "RSS feeds" and "encryption" to describe the security of The Cloud."
- the word "secure" is very ambiguous. Of course a lock is more secure than no lock, but we all know several types of locks exist.
- MD5 is actually outdated, cfr articles about MD5 collision attack. Even though mainstream computers are not powerful enough for such an attack, there are many trojans and other malicious software that allow infected computers to work as an attack unit in a whole cluster.
- "RSS feeds" has nothing to do with security, and is just a document in XML format to frequently publish some summary data. Of course, you can add encrypted data in an RSS feed, but I dont see much interest in that since RSS is mainly meant for short messages
- "encryption" is no guarantuee for security
Even though many people are attracked by fancy security-related terms, many forget that:
- security is determined by the weakest chain, not the strongest. Possible weaknesses are weak passwords, outdated encryption, data theft at the source or destination, ...
- security is based on confidence, in the sense that the company you send secure data to can - in theory - do with it as he likes.
- most fully encrypted data is only "secure" for a certain amount of time. After all, computers become more powerful every day and more and more people use to have one (or more).