{"id":8083,"date":"2018-06-26T14:48:43","date_gmt":"2018-06-26T21:48:43","guid":{"rendered":"https:\/\/www.privateinternetaccess.com\/blog\/?p=8083"},"modified":"2022-08-23T16:47:29","modified_gmt":"2022-08-23T23:47:29","slug":"rainclouds-the-case-against-cloud-computing-security","status":"publish","type":"post","link":"https:\/\/www.privateinternetaccess.com\/blog\/rainclouds-the-case-against-cloud-computing-security\/","title":{"rendered":"RainClouds – The Case Against Cloud Computing Security"},"content":{"rendered":"

In the computing world, there\u2019s always a new buzzword or trend that everyone chases as the next \u201cbig thing.\u201d Software Defined Networks (SDNs) will replace most network technicians. Augmented Reality will be a part of our daily lives. Everyone will have a 3-D TV by 2020. Who needs an audio jack on their phone? Quantum Computing will ruin everything. The new TickleMe Elmo features Blockchain technology. The AI powering the next generation Internet of Things will change the world.<\/p>\n

While most of these things are gross exaggerations or just outright wrong, there\u2019s a single buzzword that you hear daily in the IT world that alarms me more than any other. The cloud<\/b>. More specifically, the secure cloud.<\/p>\n

The concept of cloud computing is rather simple. You don\u2019t need to build physical hardware for every little task that you need completed. You can split your server into small isolated pieces and divvy up the computing power to many small tasks. The easiest example is the web server. Most websites do not get enough traffic to warrant their own dedicated server, and spending $50 per month on a dedicated server for a website feels like a waste. Cloud technology can break a single big server up into 20 websites, and charge $5\/month for hosting the website. The web admins get their website for 1\/10th the price, and the web hosts running the servers double their revenue for each server. Everyone wins.<\/p>\n

So while the benefits are obvious, looking at the cloud from a security lens is a mountain to overcome. You need to ensure that the hardware is properly isolated, and that the software behaves the same way in the cloud as is expected. If the software crashes, deviates, or is intentionally malicious, the other members of the cloud have to be safe and performing normally. This means that not only do all of the members have to be secure from one another, they have to have the proper resources available, even when other members of the cloud are misbehaving.<\/p>\n

These are monumentally complex problems, with billion dollar companies and a whole new concert of buzzwords. Isolation, Sandboxing, Virtualization, Deterrent Controls, Hypervisor, Xen, VMware, Instancing.<\/p>\n

But there are fundamental problems with the approaches to fixing the cloud computing problem. Software is inherently insecure, and adding complexity to software invariably adds bugs and anomalous behavior. Hardware design, especially secure hardware design, is a constantly moving target and new attacks come to life on a near-daily basis.<\/p>\n

There\u2019s no dancing around this issue. Cloud computing is inherently less secure than regular computing. For every major bug in Linux, OSX, or Windows, you are layering more problems onto your systems by adding the Cloud.<\/p>\n

So if you\u2019re a hardware manufacturer, a cloud OS developer, or a host trying to maximize your returns on your hardware, how do you correct this issue?<\/p>\n

You conspire.<\/strong><\/em><\/p>\n

You try to convince the world that the Cloud is secure, and that you don\u2019t have to worry about outside parties accessing your private data or crushing your services to rubble.<\/p>\n

Some marketing materials from three of the biggest cloud computing companies:<\/p>\n

\"\"<\/a><\/p>\n

\"\"<\/a><\/p>\n

\"\"<\/a>Security security security.<\/strong> Don\u2019t worry, they\u2019ve got you covered. Except they don\u2019t. There are escapes (breaking out of your cloud into other\u2019s on the same computer), RCE\u2019s (remotely breaking into anyone\u2019s cloud who is using a specific platform), and all kinds of information disclosure vulnerabilities. These are not rare occurrences and some of these vulnerabilities cannot be fixed with patching.<\/p>\n

Let\u2019s take a look at known vulnerabilities for Vmware products:<\/p>\n

\"\"<\/a>\"\"<\/a>\"\"<\/a>\"\"<\/a>These are the worst kinds of vulnerabilities. Escapes, remote code execution, full information disclosure, hard coded passwords. You may assume that this is a problem at VMware, but this is an industry-wide problem that the \u201cSecure Cloud\u201d faces. The massive amount of complexity added simply makes the systems less secure. You\u2019ll find the same problems with Azure<\/a>, Xen<\/a>, and all of the others.<\/p>\n

And this is not even considering the significant number of attacks against the hardware itself. Shared resources are particularly vulnerable to hardware analysis and manipulation. Things like Rowhammer, timing analysis, poor security of caches and memory are all problems that the industry seems unable to fully solve.<\/p>\n

This week, we have TLBleed<\/a>, where the translation lookaside buffer in pretty much all Intel processors is compromised and will not be patched. Over the last two months, we have had multiple waves of flaws under the Meltdown and Spectre<\/a> umbrella that significantly weaken the security of Cloud systems. Rowhammer allows direct manipulation of DRAM from neighbors on your server hardware.<\/p>\n

This is why serious security and privacy companies invest in bare-metal hardware for their critical infrastructure. Eliminating the Cloud from your network significantly reduces your attack surface and increases performance.<\/p>\n

Remember: The words \u201csecure\u201d and \u201cCloud\u201d never belong together.<\/p>\n

Ask your VPN provider if they use virtual servers or clouds for their VPN network, or if they run bare-metal servers<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"

In the computing world, there\u2019s always a new buzzword or trend that everyone chases as the next \u201cbig thing.\u201d Software Defined Networks (SDNs) will replace most network technicians. Augmented Reality will be a part of our daily lives. Everyone will have a 3-D TV by 2020. Who needs an audio jack on their phone? Quantum … Continue reading “RainClouds – The Case Against Cloud Computing Security”<\/span><\/a><\/p>\n","protected":false},"author":32,"featured_media":8100,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_stopmodifiedupdate":true,"_modified_date":"","footnotes":""},"categories":[12,1],"tags":[140],"class_list":["post-8083","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","category-news","tag-cloud"],"yoast_head":"\nRainClouds - The Case Against Cloud Computing Security<\/title>\n<meta name=\"description\" content=\"In the computing world, there\u2019s always a new buzzword or trend that everyone chases as the next \u201cbig thing.\u201d Software Defined Networks (SDNs) will replace\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.privateinternetaccess.com\/blog\/rainclouds-the-case-against-cloud-computing-security\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"RainClouds - The Case Against Cloud Computing Security\" \/>\n<meta property=\"og:description\" content=\"In the computing world, there\u2019s always a new buzzword or trend that everyone chases as the next \u201cbig thing.\u201d Software Defined Networks (SDNs) will replace\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.privateinternetaccess.com\/blog\/rainclouds-the-case-against-cloud-computing-security\/\" \/>\n<meta property=\"og:site_name\" content=\"PIA\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/privateinternetaccess\/\" \/>\n<meta property=\"article:published_time\" content=\"2018-06-26T21:48:43+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-08-23T23:47:29+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2018\/06\/rain-clouds.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1600\" \/>\n\t<meta property=\"og:image:height\" content=\"900\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Derek Zimmer\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@http:\/\/www.twitter.com\/ostifofficial\" \/>\n<meta name=\"twitter:site\" content=\"@buyvpnservice\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Derek Zimmer\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/rainclouds-the-case-against-cloud-computing-security\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/rainclouds-the-case-against-cloud-computing-security\/\"},\"author\":{\"name\":\"Derek Zimmer\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/person\/e9f24badc1559621e721d94ecb18d6e1\"},\"headline\":\"RainClouds – The Case Against Cloud Computing Security\",\"datePublished\":\"2018-06-26T21:48:43+00:00\",\"dateModified\":\"2022-08-23T23:47:29+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/rainclouds-the-case-against-cloud-computing-security\/\"},\"wordCount\":840,\"commentCount\":1,\"publisher\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/rainclouds-the-case-against-cloud-computing-security\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2018\/06\/rain-clouds.png\",\"keywords\":[\"cloud\"],\"articleSection\":[\"Cybersecurity\",\"General Privacy News\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.privateinternetaccess.com\/blog\/rainclouds-the-case-against-cloud-computing-security\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/rainclouds-the-case-against-cloud-computing-security\/\",\"url\":\"https:\/\/www.privateinternetaccess.com\/blog\/rainclouds-the-case-against-cloud-computing-security\/\",\"name\":\"RainClouds - The Case Against Cloud Computing Security\",\"isPartOf\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/rainclouds-the-case-against-cloud-computing-security\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/rainclouds-the-case-against-cloud-computing-security\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2018\/06\/rain-clouds.png\",\"datePublished\":\"2018-06-26T21:48:43+00:00\",\"dateModified\":\"2022-08-23T23:47:29+00:00\",\"description\":\"In the computing world, there\u2019s always a new buzzword or trend that everyone chases as the next \u201cbig thing.\u201d Software Defined Networks (SDNs) will replace\",\"breadcrumb\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/rainclouds-the-case-against-cloud-computing-security\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.privateinternetaccess.com\/blog\/rainclouds-the-case-against-cloud-computing-security\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/rainclouds-the-case-against-cloud-computing-security\/#primaryimage\",\"url\":\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2018\/06\/rain-clouds.png\",\"contentUrl\":\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2018\/06\/rain-clouds.png\",\"width\":1600,\"height\":900},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/rainclouds-the-case-against-cloud-computing-security\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.privateinternetaccess.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"RainClouds – The Case Against Cloud Computing Security\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#website\",\"url\":\"https:\/\/www.privateinternetaccess.com\/blog\/\",\"name\":\"PIA\",\"description\":\"Online privacy news from around the world.\",\"publisher\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.privateinternetaccess.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#organization\",\"name\":\"Private Internet Access\",\"url\":\"https:\/\/www.privateinternetaccess.com\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2018\/07\/pialogowhitekglogo.png\",\"contentUrl\":\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2018\/07\/pialogowhitekglogo.png\",\"width\":1200,\"height\":1200,\"caption\":\"Private Internet Access\"},\"image\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/privateinternetaccess\/\",\"https:\/\/x.com\/buyvpnservice\",\"https:\/\/www.instagram.com\/piavpn\/\",\"https:\/\/www.youtube.com\/channel\/UClyJZ47Rizb1xnwuKXDI0_w\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/person\/e9f24badc1559621e721d94ecb18d6e1\",\"name\":\"Derek Zimmer\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/399c45f76a929cfe8ed46349f8166d975f7fa088108970562cf67fa46ab0176d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/399c45f76a929cfe8ed46349f8166d975f7fa088108970562cf67fa46ab0176d?s=96&d=mm&r=g\",\"caption\":\"Derek Zimmer\"},\"description\":\"Derek is a cryptographer, security expert and privacy activist. He has twelve years of security experience and six years of experience designing and implementing privacy systems. He founded the Open Source Technology Improvement Fund (OSTIF) which focuses on creating and improving open-source security solutions through auditing, bug bounties, and resource gathering and management.\",\"sameAs\":[\"https:\/\/ostif.org\/\",\"https:\/\/www.linkedin.com\/in\/derek-zimmer-2164a441\/\",\"https:\/\/x.com\/http:\/\/www.twitter.com\/ostifofficial\"],\"url\":\"https:\/\/www.privateinternetaccess.com\/blog\/author\/derek-zimmer\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"RainClouds - The Case Against Cloud Computing Security","description":"In the computing world, there\u2019s always a new buzzword or trend that everyone chases as the next \u201cbig thing.\u201d Software Defined Networks (SDNs) will replace","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.privateinternetaccess.com\/blog\/rainclouds-the-case-against-cloud-computing-security\/","og_locale":"en_US","og_type":"article","og_title":"RainClouds - The Case Against Cloud Computing Security","og_description":"In the computing world, there\u2019s always a new buzzword or trend that everyone chases as the next \u201cbig thing.\u201d Software Defined Networks (SDNs) will replace","og_url":"https:\/\/www.privateinternetaccess.com\/blog\/rainclouds-the-case-against-cloud-computing-security\/","og_site_name":"PIA","article_publisher":"https:\/\/www.facebook.com\/privateinternetaccess\/","article_published_time":"2018-06-26T21:48:43+00:00","article_modified_time":"2022-08-23T23:47:29+00:00","og_image":[{"width":1600,"height":900,"url":"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2018\/06\/rain-clouds.png","type":"image\/png"}],"author":"Derek Zimmer","twitter_card":"summary_large_image","twitter_creator":"@http:\/\/www.twitter.com\/ostifofficial","twitter_site":"@buyvpnservice","twitter_misc":{"Written by":"Derek Zimmer","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.privateinternetaccess.com\/blog\/rainclouds-the-case-against-cloud-computing-security\/#article","isPartOf":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/rainclouds-the-case-against-cloud-computing-security\/"},"author":{"name":"Derek Zimmer","@id":"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/person\/e9f24badc1559621e721d94ecb18d6e1"},"headline":"RainClouds – The Case Against Cloud Computing Security","datePublished":"2018-06-26T21:48:43+00:00","dateModified":"2022-08-23T23:47:29+00:00","mainEntityOfPage":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/rainclouds-the-case-against-cloud-computing-security\/"},"wordCount":840,"commentCount":1,"publisher":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/#organization"},"image":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/rainclouds-the-case-against-cloud-computing-security\/#primaryimage"},"thumbnailUrl":"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2018\/06\/rain-clouds.png","keywords":["cloud"],"articleSection":["Cybersecurity","General Privacy News"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.privateinternetaccess.com\/blog\/rainclouds-the-case-against-cloud-computing-security\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.privateinternetaccess.com\/blog\/rainclouds-the-case-against-cloud-computing-security\/","url":"https:\/\/www.privateinternetaccess.com\/blog\/rainclouds-the-case-against-cloud-computing-security\/","name":"RainClouds - The Case Against Cloud Computing Security","isPartOf":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/rainclouds-the-case-against-cloud-computing-security\/#primaryimage"},"image":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/rainclouds-the-case-against-cloud-computing-security\/#primaryimage"},"thumbnailUrl":"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2018\/06\/rain-clouds.png","datePublished":"2018-06-26T21:48:43+00:00","dateModified":"2022-08-23T23:47:29+00:00","description":"In the computing world, there\u2019s always a new buzzword or trend that everyone chases as the next \u201cbig thing.\u201d Software Defined Networks (SDNs) will replace","breadcrumb":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/rainclouds-the-case-against-cloud-computing-security\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.privateinternetaccess.com\/blog\/rainclouds-the-case-against-cloud-computing-security\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.privateinternetaccess.com\/blog\/rainclouds-the-case-against-cloud-computing-security\/#primaryimage","url":"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2018\/06\/rain-clouds.png","contentUrl":"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2018\/06\/rain-clouds.png","width":1600,"height":900},{"@type":"BreadcrumbList","@id":"https:\/\/www.privateinternetaccess.com\/blog\/rainclouds-the-case-against-cloud-computing-security\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.privateinternetaccess.com\/blog\/"},{"@type":"ListItem","position":2,"name":"RainClouds – The Case Against Cloud Computing Security"}]},{"@type":"WebSite","@id":"https:\/\/www.privateinternetaccess.com\/blog\/#website","url":"https:\/\/www.privateinternetaccess.com\/blog\/","name":"PIA","description":"Online privacy news from around the world.","publisher":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.privateinternetaccess.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.privateinternetaccess.com\/blog\/#organization","name":"Private Internet Access","url":"https:\/\/www.privateinternetaccess.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2018\/07\/pialogowhitekglogo.png","contentUrl":"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2018\/07\/pialogowhitekglogo.png","width":1200,"height":1200,"caption":"Private Internet Access"},"image":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/privateinternetaccess\/","https:\/\/x.com\/buyvpnservice","https:\/\/www.instagram.com\/piavpn\/","https:\/\/www.youtube.com\/channel\/UClyJZ47Rizb1xnwuKXDI0_w"]},{"@type":"Person","@id":"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/person\/e9f24badc1559621e721d94ecb18d6e1","name":"Derek Zimmer","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/399c45f76a929cfe8ed46349f8166d975f7fa088108970562cf67fa46ab0176d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/399c45f76a929cfe8ed46349f8166d975f7fa088108970562cf67fa46ab0176d?s=96&d=mm&r=g","caption":"Derek Zimmer"},"description":"Derek is a cryptographer, security expert and privacy activist. He has twelve years of security experience and six years of experience designing and implementing privacy systems. He founded the Open Source Technology Improvement Fund (OSTIF) which focuses on creating and improving open-source security solutions through auditing, bug bounties, and resource gathering and management.","sameAs":["https:\/\/ostif.org\/","https:\/\/www.linkedin.com\/in\/derek-zimmer-2164a441\/","https:\/\/x.com\/http:\/\/www.twitter.com\/ostifofficial"],"url":"https:\/\/www.privateinternetaccess.com\/blog\/author\/derek-zimmer\/"}]}},"_links":{"self":[{"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/posts\/8083","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/users\/32"}],"replies":[{"embeddable":true,"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/comments?post=8083"}],"version-history":[{"count":14,"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/posts\/8083\/revisions"}],"predecessor-version":[{"id":30605,"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/posts\/8083\/revisions\/30605"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/media\/8100"}],"wp:attachment":[{"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/media?parent=8083"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/categories?post=8083"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/tags?post=8083"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}