EU Parliament adopts resolution to set standards for cloud interoperability

http://blog.mist.io/post/70473372408/eu-parliament-adopts-resolution-to-set-standards-for

by cpsaltis • 13 years ago

47 34 13 years ago

blog.mist.io

"... the standards should enable easy and complete data and service portability, and a high degree of interoperability between cloud services, in order to increase rather than limit competitiveness."

Come on HN, let's help the EU. Anyone got any great ideas? Because I don't even understand the question, much less what the answer would be.

Edit: notice how everyone is just "assuming" what they mean. The problem is not well defined.

Svip• 13 years ago

I think they mean it should be easier to migrate from one operator to another. I am not familiar with the difficulty of that since I don't use any cloud services.

AndrewDucker• 13 years ago

That's kind of how I feel.

How would you ensure service portability between Google App Engine (runs software, no access to the OS), AWS (Linux VMs) and Azure (Windows VMs)?

anpalton• 13 years ago

They are not seeking to ensure portability between different kinds of services (and Azure has Linux VMs by the way)

But portability between, AWS, Google Compute, Azure, Rackspace, Softlayer, Nephoscale, Linode, Digital Ocean, etc would be quite beneficial.

acron0• 13 years ago

Perhaps they mean specifically consumer cloud/file services, a la Dropbox, SkyDrive, iCloud, Ubuntu One etc.

garblegarble5• 13 years ago

There's been some work over the last 4 or so years on producing cloud abstractions to enable a multi-cloud approach (effectively trying to provide a sensible API that can work independently of a particular cloud provider). Projects like OCCI http://en.wikipedia.org/wiki/Open_Cloud_Computing_Interface have published documents on how this would look

Personally my take is that the proposed abstractions are too low level to be of genuine use as an abstraction layer across cloud providers - but I'm biased in that I was involved in the research and development of a higher-level abstraction that provided something closer towards a PaaS approach - roughly equivalent to provisioning an instance (with disks and networking as required) and configuring it with puppet (this was back in in 2007 though).

The general attitude I've got from cloud providers when I spoke to them is that small providers like the idea of standards (reduces barrier to picking up their service) and big providers have no motivation to allow such mobility or multi-cloud use.

thwarted• 13 years ago

Personally my take is that the proposed abstractions are too low level to be of genuine use as an abstraction layer across cloud providers

Yeah, what vagrant has been able to acomplish so far is an example of this. There are many features that only work on some providers, usually just VirtualBox, and the AWS support is largely limited to controlling instances (vs configuring them).

I think it'll get there eventually, but there's not a lot of motivation/incentive from the established players.

freyfogle• 13 years ago

Well, as an example, here's a London based start-up that is working on providing an abstraction layer across cloud services.

http://storagemadeeasy.com

herge3• 13 years ago

How about just starting with standards for downloading one's own data from cloud operators?

Maybe legislate an easy way to download all my emails from gmail and upload them to outlook.com. Wouldn't that be very useful?

garblegarble5• 13 years ago

Not to be reductive but isn't IMAP the protocol to use for that? Although I don't fancy the idea of legislating that e-mail providers must use IMAP (and if I picked a mail provider without it I'm assuming they'd have a compelling security feature or something...)

belorn• 13 years ago

Some webmail services, notable hotmail, do not offer an IMAP interface. That service is exclusively a premium option, which is required if you ever want to transfer your emails away from their service. I actually done such transfer once, which felt eerily like paying a ransom.

Thankfully, gmail do not keep your emails hostages like that, and users can transfer their property away into a private servers if they ever get tired of the constant spying-for-profit.

ihsw• 13 years ago

I think the parent was suggesting a consumer-friendly method of that -- for example Gmail.com would provide a button that lets the user download a single file, and Outlook.com would accept such a file.

sailfast• 13 years ago

Is the EU parliament really the body we want setting standards for interoperability? Things like this typically result in unintentional externalities that cost providers money and impose compliance burdens that are quickly out of date.

I appreciate the sentiment regarding security and interoperability, and they might be able to declare their intention to procure only systems that meet X standards, but I hope they refrain from broader impositions on commercial users and cloud providers.

NSA articles aside, I see businesses fleeing regulatory burdens faster than the possibility of surveillance.

garblegarble5• 13 years ago

Yes, and the problem with having to support these approaches is it limits the ability of a provider to innovate when it has a model that doesn't fit the abstraction of the API (e.g. look at the speed of innovation at AWS, standards bodies would have a tough time keeping up with that)

tincholio• 13 years ago

You probably misread, it will be the ETSI setting the standard, not the European parliament.

tehwalrus• 13 years ago

Giving cloud hosts the status of Data Controllers

This is a bold move, and much more significant than some attempt at standardisation that probably won't work.

It will make it more expensive to hire a VM, probably, and I wonder if there will indeed be any benefit (given that cloud providers will have to start vetting and inspecting the source code on the VMs people are running - potentially taking away all the benefits of programmatic instance deployment.)

spindritf• 13 years ago

Oh great, the useless bunch who brought you the cookie law will now take on cloud interoperability. And UN, another highly effective institution, will take on spying. I feel safer already.

Does anyone here really believes that any of this is going to make a measurable, positive difference in a regular Internet user's life? That somehow more government meddling is a cure for government meddling? Weren't European spy agencies cooperating with the Americans?

It's yet another power grab of the "no crisis should go to waste" kind.

herge3• 13 years ago

They are also the same group that brought us usb charging for all phones (or at least throw around enough threats like this one for manufactures to start using usb cords for charging for the more pedant among you).

sp3322• 13 years ago

I thought the phone manufacturers were behind that push? Also, how did Apple get out of that?

rnnr• 13 years ago

Unfortunately, scores of people here on HN and elsewhere believe in those acts.

Anyway, I'm not gonna repeat the usual libertarian 'crap', I just want to add, that the justification of regulation governments enjoy is what makes them possible to eventually go a litte bit 'over the edge' like the recent Snowden scandal.

DanI-S• 13 years ago

I've been hoping for years that the EU will eventually mandate that a service must be obliged to delete on request - irretrievably, not by merely flagging it as "deleted" - any data held about a given individual.

To me, this is a natural part of the concept of privacy. I can have momentary privacy: the assurance that nobody is currently watching through my window, listening to my phone calls, or reading my emails as I send them. But there's no assurance of future privacy if we don't have the right to destroy our old data, wherever it may be held.

When people provide an entity with information, they're doing so under the framework provided by current legislation regarding privacy and freedom of information. If these rules are subject to change - through new anti-terror legislation, for example - their information may become accessible in ways that they did not expect when it was originally provided.

I don't think it's possible to maintain any real sense of privacy while this remains the case. How can your data be considered private when it can be opened up for inspection at a later date, under a different regime? There's currently no way to participate in a connected economy without giving away your future right to privacy.

Edit: and the reason I've been hoping the EU will do this is that, realistically, nobody else will.

M2Ys4U• 13 years ago

There's been talk for a while now about a "right to be forgotten" which is along these lines, but it has a terrible name.

rainmaking• 13 years ago

Oh goodie goo, another mandatory standard by the people who brought us the EBICS bank standard, which is a freakishly complex reinvention of SFTP.

With EBICS, you transmit a bank command file by encrypting, encoding and wrapping it as CDATA into an XML file and then repeating the process. You have to use different kinds of wrapper files with different kinds of intricacies for each type of file you might upload to your bank.

The whole specification is 200 pages, and all it does is transfer files.

tokenizer2• 13 years ago

I dont reallt care if facebook tracks me through iframes or if google tracks me through analytics.

I volunteered to go to a website, that volunteered to use that service. I can choose not to visit the source sites or the associate ones.

The problem I see with all of this "the governments - or - some government - or - the UN - needs to protect our privacy!!!"

Against whom? Facebook? Google?

How about GOVERNMENTS. If you ask me, any sort of nefarious behaviour commited by web companies are most likely the product of a larger, coercive form of behaviour starting from the government.

icebraining• 13 years ago

I volunteered to go to a website, that volunteered to use that service. I can choose not to visit the source sites or the associate ones.

How do you know those sites have those trackers before visiting them? The only way to "opt-out" of the sites with such trackers is to stop using the web entirely.

Against whom? Facebook? Google?

How about GOVERNMENTS.

Actually, yes. In the (European) country I live in, public organizations have been prevented from invading privacy (e.g. setting CCTV cameras) by our national data protection commission.

If you ask me, any sort of nefarious behaviour commited by web companies are most likely the product of a larger, coercive form of behaviour starting from the government.

How is web analytics and personal data mining a product of State spying? And even if it is, how is it justifiable on that basis?

pagade• 13 years ago

Any idea how long it would take before the first draft is out?

ape4• 13 years ago

The good stuff could be interop. The bad stuff would be silly extra regulations providers have to undergo.

rsync• 13 years ago

We've got your cloud interoperability right here:

   ssh user@rsync.net s3cmd get s3://rsynctest/mscdex.exe

   ssh user@rsync.net s3cmd ls s3://rsynctest

Done and done.

Ask about discounts for HN readers.

EU Parliament adopts resolution to set standards for cloud interoperability

Related Stories