Hacker News Reader

Comment by opendais | Hacker News Reader

You are actively encouraging a process that is vulnerable to MITM, not acknowledging that between regions AWS data transfer is over the public internet [http://stackoverflow.com/questions/9891419/can-ec2-instances...], etc.

I strongly suggest you evaluate something like http://www.tarsnap.com/spiped.html, a VPN, or a similar solution. This isn't just read-only access we are talking about.

View on HN

I absolutely acknowledge that inter-region AWS usage is over the open Internet, and no one's encouraging bad habits like transferring unencrypted data between regions here.

VPNs are great. AWS security groups are reliable too.

I may have overreacted but I've seen people make statements like "We consider this reasonably safe within EC2..." and not realize the inter-region issue. That is why I wanted to force a clear statement.

I also think this really needs to be in your marketing copy or someone who is unaware of that is going to do that sort of thing.

Sorry if I'm being a pain but I think you are overestimating the average developer's knowledge of the potential security issues with exposing Redis like this.

Heroku offers 4 redis cloud providers. I wonder how many setups (if any) happen to go through inter-region, and if some of these providers support some kind of VPN/tunneling.

- https://addons.heroku.com/openredis - https://addons.heroku.com/rediscloud - https://addons.heroku.com/redistogo - https://addons.heroku.com/redisgreen

Redis Cloud instances are at the same region as Heroku's (both in the US and the EU) - don't know about the rest though.

Reply on news.ycombinator.com