Details of Google Cloud GCVE incident | Google Cloud Blog
cloud.google.com/blog/products/infrastructure/details-of-google-cloud-gcve-incident
What Jamie wrote
I shared this event in Weekly Thing 289 where Google Cloud literally deleted the account of a customer erasing all information with no backups. Google released this note about what happened.
During the initial deployment of a Google Cloud VMware Engine (GCVE) Private Cloud for the customer using an internal tool, there was an inadvertent misconfiguration of the GCVE service by Google operators due to leaving a parameter blank. This had the unintended and then unknown consequence of defaulting the customer’s GCVE Private Cloud to a fixed term, with automatic deletion at the end of that period.
This reminds me of an AWS S3 outage a few years ago also caused by a maintenance activity and an engineer putting the wrong value in a field. These maintenance programs are places where corners often get cut. The team will think "Hey, we have professionals using this. It is okay. if we don't catch every error scenario." But even professionals make mistakes. There is no truly "safe" user.
Same host · 16 links from cloud.google.com
- Google Cloud Duet AI for developers | Google Cloud Blog
- Signals of Trouble: Multiple Russia-Aligned Threat Actors Actively Targeting Signal Messenger | Google Cloud Blog
- Build Web3 AI agents with Google Cloud | Google Cloud Blog
- Exploring pipe syntax real-world use cases | Google Cloud Blog
- Agent2Agent protocol (A2A) is getting an upgrade | Google Cloud Blog
Saved the same week · 15 links that week
- The Sea Change on Crypto-Regulation - Marginal REVOLUTION
- My Morning Routine - zen habits
- Manton Reece - Audio narration in Micro.blog
- A root-server at the Internet’s core lost touch with its peers. We still don’t know why. | Ars Technica
- EcoFlow’s $200 PowerStream is so clever, you might buy a $4,000 solar generator - The Verge