What is Heartbleed?
This vulnerability takes advantage of a memory configuration within the ever-popular OpenSSL software library. The TLS heartbeat extension (RFC 6520) on an exploited version of OpenSSL allows an attacker to view up to 64k of what is in memory with each “heartbeat.” Thus, a multitude of information can be obtained unnoticed. It is important to note that this exploit is found in OpenSSL's implementation of SSL/TLS, not within the TLS protocol itself.
How does this affect Green House Data's services?
We are actively pursuing efforts to mitigate any presence of vulnerable systems within Green House Data's cloud infrastructure. From what we have seen so far, these efforts are primarily focused on systems using OpenSSL to encrypt TLS connections. Green House Data provides service and customer portals that use SSL and have taken the necessary actions to secure our systems.
What steps can be taken to fix this?
Datacenter Dynamics reports that the Telecommunications Industry Association (TIA) will remove "tiers" from its data center benchmarking system. We've previously explained the differences between TIA and the Uptime Institute data center tier benchmarks here on the blog—they mainly differ in the requirement of raised floors. The article also explains that the Uptime Institute and TIA will work together to establish a unified front for data center ratings.
You signed the SOA, logged in to your cloud provider web portal, and spun up some servers. You’re ready to get to work, but one thing is missing: the apps! Raw infrastructure is all well and good, but without software running in the cloud, you’re not going to get much work done. The days when companies could buy a single license or the rights to 200-odd users and use that software for life are disappearing quickly.
When assessing software licenses for the cloud, make sure to evaluate how many users will access the software and how many physical and virtual processors might be involved. Here are the top factors to consider for software licensing in the cloud.
APRIL 1, 2014 – CHEYENNE, WY – Green House Data, perhaps the greatest and greenest of cloud hosting providers, today announced a new business plan for Babysitting as a Service, or managed day care. The announcement comes alongside the creation of a new full-time position in the Network Operations Center of Red Bull Stockperson.
“I mean, the NOC is already open 24/7. We might as well toss some blocks and cots in the corner and let people leave their kids around,” said Art Salazar, data center manager. “It’s the easiest deployment we’ve ever performed. What could go wrong?”
As part of our commitment to transparency and support, Green House Data is sharing some statistics from the Network Operations Center. The NOC is home to our support team, the first responders to customer issues. The 2014 Support Report discovered several key statistics including a 12.8 minute average response time.