Score:0

Web Console threats

de flag

Can google engineers see or access what's within my account's VM, and how can I be sure if this isn't the case? But, assuming that's the case, what tools do your engineers have in case of VM troubleshooting?

John Hanley avatar
cn flag
The answer is yes, Google can access your account. In some cases, you must manually approve Google's access. Google has written policies regarding this and logs that record what actions Google performs. This is called **Access Transparency** https://cloud.google.com/cloud-provider-access-management/access-transparency/docs/overview
Score:0
no flag

The generally accepted simplification is that whatever safeguards and encryption you built into your software, they will not protect you from a determined adversary that has full control over the hardware where your software is running.

So in that regard Google Cloud engineers could, in theory, be able to access your data. (Without your knowledge and consent)

In practice Google, like other reputable providers, has internal security and process procedures, checks and controls that are designed to prevent that.

Those should be audited regularly by an external, independent third party to help you decide if you can and are willing to trust them.

Decide for yourself https://cloud.google.com/security/compliance

Score:0
lr flag

According to their "Customer data is your data, not Google’s."privacy policy

You should disable root access via SSH, and change default username/password that they provide for initial access, if you are still don't trust them.

de flag
What about the web console they can observe the live session without need to access my VM?
lr flag
You should not use web console, simple as that. Always use SSH to authenticate to ensure communication is encrypted.
mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.