From the course: Threat Modeling: Information Disclosure in Depth

Unlock the full course today

Join today to access over 22,500 courses taught by industry experts or purchase this course individually.

Cloud

Cloud

- [Instructor] I hope it's obvious that the cloud is someone else's computer and that you're trusting that someone with your data, but the cloud is more than that. As a set of design patterns, it's also the agile and fluid use of third party services to deliver value. Many times that means including the latest and greatest geolocation service, ad service, payment service, emoji service, or what have you. These services are usually designed to be brought in with as few lines of code as possible. Deciding which data to reveal to the library requires code. And so, you tell the library everything and hope it does what you want. The same problem can exist in advertising libraries and other libraries for mobile apps. So, while the cloud is great, a little thoughtfulness can help you avoid accidentally disclosing information.

Contents