Hacker News Reader

Comment by sp332 | Hacker News Reader

They know who owns the VM, and now they know that you connected, sent & received a certain amount of data at a certain time.

[Edit: apparently this is more encrypted than I was thinking, so the next bit is probably wrong.] They could potentially look inside the VM to look at the specific data on the other side of TLS.

View on HN

> They know who owns the VM, and now they know that you connected, sent & received a certain amount of data at a certain time.

Which is quite similar to meta data that's collected on phone calls, such data is regularly the basis for governments killing people [0]

[0] https://www.justsecurity.org/10311/michael-hayden-kill-peopl...

Sure, and your ISP knows every single IP you have connected to, too. That is just how the internet works.

The ISP only knows that the traffic went to GCP. Google knows which customer it went to.

eSNI (or similar) still hasn't been rolled out at large scale. If your ISP wants to, it can know what domain the application is trying to connect to. Domain fronting may confuse them, but most services don't use that at all.

Can anyone provide proof that Google records this (for Google, not as network telemetry for cloud customers)?

Google Cloud would be negligent if they didn't collect information about ingress and egress traffic mapped to each of their tenants. Since they own the servers and network, it's on them to be able to investigate and track abuse.

Perhaps I phrased it poorly. The inference seems to be Google using this data for their gain (beyond operational needs). Is there any proof of that? Or is my inference incorrect?

Reply on news.ycombinator.com