How the PS3 hypervisor was hacked

January 27th, 2010 by JP Gagne

“George’s hack compromises the hypervisor after booting Linux via the “OtherOS” feature. He has used the exploit to add arbitrary read/write RAM access functions and dump the hypervisor.”

http://rdist.root.org/2010/01/27/how-the-ps3-hypervisor-was-hacked/

NewServer’s Bare Metal Cloud makes Cloud Servers and EC2 look like two sick men in a sack race

January 17th, 2010 by JP Gagne

Sacks’ two-man experiment aside, I can think of at least one cloud out there that could make EC2 and Rackspace look like a snail chasing molasses when it comes to kernel compilation and disk I/O:
“NewServer’s Bare Metal Cloud makes Cloud Servers and EC2 look like two sick men in a sack race” sounds catchy to me. I wonder if Rackspace will sponsor that benchmark?

http://itknowledgeexchange.techtarget.com/cloud-computing/benchmarks-for-cloud-more-please/

Newservers has the highest performance

January 15th, 2010 by JP Gagne

“Newservers has the highest performance” Paessler said. “They’re an interesting case because they give you bare metal,” he said, despite selling capacity and time the same way Amazon does. That may give virtualization boosters pause for thought.

http://itknowledgeexchange.techtarget.com/cloud-computing/tag/network-monitoring-in-the-cloud/

A PCI-Compliant Cloud? Not at Amazon

October 22nd, 2009 by JP Gagne

“From a compliance and risk management perspective, we recommend that you do not store sensitive credit card payment information in our EC2/S3 system because it is not inherently PCI level 1 compliant,” an Amazon representative told a customer…

http://www.datacenterknowledge.com/archives/2009/08/19/a-pci-compliant-cloud-not-at-amazon/

Spamhaus has listed all U.S. Amazon.com EC2 IP addresses as spam

October 20th, 2009 by JP Gagne

“They say they need to hear from Amazon to resolve the issue. In the meantime, AWS users are reporting stiff struggles to get legitimate email traffic out of the cloud.”

http://searchcloudcomputing.techtarget.com/news/article/0,289142,sid201_gci1371369,00.html

Can Internet attackers target a particular virtual machine on a large public cloud platform?

October 16th, 2009 by JP Gagne

“Using the Amazon EC2 service as a case study, we show that it is possible to map the internal cloud infrastructure, identify where a particular target VM is likely to reside, and then instantiate new VMs until one is placed co-resident with the target. We explore how such placement can then be used to mount cross-VM side-channel attacks to extract information from a target VM on the same machine.”

http://www.datacenterknowledge.com/archives/2009/08/31/cloud-cartography-and-security/

data transfer fees from EC2

October 13th, 2009 by JP Gagne

“New Servers also has a bandwidth limit of 3GB per hour with $0.10 per GB if you transfer more than that. Most people should find that 3GB/hour is enough for a single server. This compares to EC2 where you pay $0.10 per GB to receive data and $0.17 to transmit it. If you actually need to transmit 2100GB per month then the data transfer fees from EC2 would be greater than the costs of renting a server from New Servers.”

http://etbe.coker.com.au/2009/10/13/new-servers-non-virtual-cloud/

Virtualization bubble

October 7th, 2009 by JP Gagne

“it sucks at performance and a lower TCO in the long run (for the people leasing, for business, it is win).”

http://www.jeffology.net/go/Virtualization_bubble

Timekeeping issue in Virtualized Environments

October 6th, 2009 by JP Gagne

“Because virtual machines work by time-sharing host physical hardware, a virtual machine cannot exactly duplicate the timing behaviour of a physical machine. This leads to the timekeeping problems explained in the VMWare White Paper about Timekeeping in Virtual Machines that results in inaccurate time measurements within the virtual machine. This affects ALL performance metrics that rely on the operating system clock time to keep track of time which includes system counters like CPU or I/O Utilization.”

http://www.theserverside.com/news/thread.tss?thread_id=58031

Is Virtualization a Cloud Prerequisite?

August 31st, 2009 by JP Gagne

“To make a long story a little less long, we saw some pretty extreme performance improvements from moving Basecamp out of a virtualized environment and back onto dedicated hardware.”

http://gigaom.com/2009/08/30/is-virtualization-a-cloud-prerequisite/