U.S. Treasury servers breached

[gtdstudente]

Fellow GTDers

If even the U.S. Treasury multi-billion dollar servers can breached does it make sense to simply throw in the towel and simply rely on the cloud?

Thank you very much

 

[pgarth]

Fellow GTDers

If even the U.S. Treasury multi-billion dollar servers can breached does it make sense to simply throw in the towel and simply rely on the cloud?

Thank you very much

For me, there’s a danger with “if even” thinking. It implies a blanket permission to do/not do something, because of a misplaced personal association/identification that levels my intersection with the other.

The underlying theme is 20K level responsibility of my data security. Announcements like these create an awareness of a gap that I may need to harden security for areas that I’m responsible for (work and life) - that’s a project/action unique to me.

Outside of that, the hacker wins more than the breach you mentioned, which leads to chaos, which is antithetical to GTD.

 

[mcogilvie]

Fellow GTDers

If even the U.S. Treasury multi-billion dollar servers can breached does it make sense to simply throw in the towel and simply rely on the cloud?

Thank you

There’s not much inherently better about cloud services, because many attacks focus at the interfaces between systems. Your personal computer is presumably much less a target for a penetration attack than the US Treasury systems. Perhaps the best practice is to keep all your systems and practices up to date. This has costs in both time and money, but I don’t see a good alternative.

 

[RomanS]

[...] does it make sense to simply throw in the towel and simply rely on the cloud?

Instead of doing what? Not using the cloud? Investing time and money to protect your data in the cloud?

 

[gtdstudente]

For me, there’s a danger with “if even” thinking. It implies a blanket permission to do/not do something, because of a misplaced personal association/identification that levels my intersection with the other.

The underlying theme is 20K level responsibility of my data security. Announcements like these create an awareness of a gap that I may need to harden security for areas that I’m responsible for (work and life) - that’s a project/action unique to me.

Outside of that, the hacker wins more than the breach you mentioned, which leads to chaos, which is antithetical to GTD.

@pgarth

Thank you for your good reply and touching on the topic of "chaos" as well as chance, uncertainty, etc. as additional consideration regarding one's GTD system

As such, those realities in themselves are such a good motivator on this end to have and maintain a personal GTD system which is why very grateful to 'statically have-&-dynamically maintain' an objective 'when life throws lemons, make lemonade machine' readily available simply known as a personal GTD system

On this end, without tempting fate, a possible hallmark of a very good personal GTD system is a very robust-&-welcoming system that improves with each-&-every chaotic, chance, uncertain unavoidable life engaging input in order for the personal GTD system to become a better-&-greater more robust-&-welcoming personal GTD system ad infinitum ?

Thank you very much

As you see GTD fit. . . .

 

[gtdstudente]

There’s not much inherently better about cloud services, because many attacks focus at the interfaces between systems. Your personal computer is presumably much less a target for a penetration attack than the US Treasury systems. Perhaps the best practice is to keep all your systems and practices up to date. This has costs in both time and money, but I don’t see a good alternative.

@mcogilvie

Thank you for your good GTD reply

Unfortunately, the U.S. Treasury is in deed the bigger target

In full GTD agreement:
"best practice is to keep all your systems and practices up to date. This has costs in both time and money, but I don’t see a good alternative."

And would humble add for reasons expressed in the prior reply above . . . time and money more prudently spent than that seemingly shown by the U.S. Treasury ?

Thank you very much

As you see GTD fit. . . .

 

[gtdstudente]

Instead of doing what? Not using the cloud? Investing time and money to protect your data in the cloud?

@RomanS

Thank you for your good reply

As you might be implying, for better or worse, with appropriate digital-&-paper redundancies, have delegated a good amount of digital concerns/responsibilities to those responsible for the cloud and can really only hope they are doing their job in their customers best interest

Thank you very much

As you see GTD fit. . . .

 

[Oogiem]

does it make sense to simply throw in the towel and simply rely on the cloud?

NOOOOO Personally, for me that is proof that all cloud based servers are at risk, worldwide !

I do NOT rely on cloud providers for my digital security. I alone am responsible for the security of my data and it's on me if I mess up. Cloud systems tend to promulgate a false sense of security. Far better to realize NO system is secure (SCIF airgaped ones excepted but even they can be breached by individuals with access and nefarious purposes) and instead make yourse;lf a small target.

IOW Keep Your Nose BELOW the foxhole!

 

[Mrs-Polifax]

@Oogiem

I'm with you! Security and safety (and privacy) all the way. I love the way you do not hesitate to speak your truth about your own needs. Fortunately, you are smart enough to know (or learn) how to protect yourself, but unfortunately there is always a level of risk. It is certainly a great concern to me that the US Treasury could have a security breach.

 

[gtdstudente]

NOOOOO Personally, for me that is proof that all cloud based servers are at risk, worldwide !

I do NOT rely on cloud providers for my digital security. I alone am responsible for the security of my data and it's on me if I mess up. Cloud systems tend to promulgate a false sense of security. Far better to realize NO system is secure (SCIF airgaped ones excepted but even they can be breached by individuals with access and nefarious purposes) and instead make yourse;lf a small target.

IOW Keep Your Nose BELOW the foxhole!

@Oogiem

Good on you . . . GTD spoken to someone who has an appreciate for Slow-&-Small inversely increasing bigger every day for greater ease, peace, and productivity

Thank you very much

 

[samuelethan]

@pgarth

Thank you for your good reply and touching on the topic of "chaos" as well as chance, uncertainty, etc. as additional consideration regarding one's GTD system

As such, those realities in themselves are such a good motivator on this end to have and maintain a personal GTD system which is why very grateful to 'statically have-&-dynamically maintain' an objective 'when life throws lemons, make lemonade machine' readily available simply known as a personal GTD system

On this end, without tempting fate, a possible hallmark of a very good personal GTD system is a very robust-&-welcoming system that improves with each-&-every chaotic, chance, uncertain unavoidable life engaging input in order for the personal GTD system to become a better-&-greater more robust-&-welcoming personal GTD system ad infinitum ?

Thank you very much
DJ Hochzeit Saarbrücken
As you see GTD fit. . . .

No, it doesn't make sense to throw in the towel. While even major institutions can be breached, the takeaway should be to strengthen your security practices, not abandon them. Cloud services can offer robust security when properly configured, but no system is invulnerable. Vigilance, regular updates, access controls, and good security hygiene remain essential—whether you're using the cloud or managing your own servers.

 

[Bill Myers]

From a GTD standpoint it doesn't matter. Cloud-only, on-premise only, something in between... from a GTD perspective it's all good.

Avoiding the cloud is like building a conventional brick wall to stop air traffic. If you pay taxes, have a driver license, use a bank, go to the doctor, hell, if you even exist your data is stored in places you know nothing about and have no control over.

I use a cloud-based list manager for GTD. I store documents and spreadsheets in OneDrive. Those have never been hacked. Any time my data has ever been hacked it's been from places like my bank, some level of government or "Who the Hell Are They, Inc."

I suppose you could insist on getting all of your bank statements and bills on paper. You could disconnect from any computer networks (of course, that would mean no internet, which would mean you're not reading this). You could go full-on survivalist and go build a log cabin and an outhouse in the woods and live there (in the log cabin, not the outhouse, don't be disgusting). Even then there is still personally identifiable information about you floating around and you have no control over it!

That's why I opt for having access to the internet and indoor plumbing.

Just use your GTD system to cope with life's curveballs. You only really have control over the choices you make.