Jump to content

Cloud (service): Difference between revisions

From Consumer Rights Wiki
Drakeula (talk | contribs)
Drakeula (talk | contribs)
Ineffective access controls: There is also a ToS page
 
(5 intermediate revisions by 2 users not shown)
Line 27: Line 27:
Because cloud computing providers, which cloud services are often built upon, have to be '''large''' in order to offer competitive advantages to their customers (as pertains to this article, particularly product manufacturers), there are very few cloud computing providers in existence. Thus, every one of them operates the infrastructure under a large number of cloud services.
Because cloud computing providers, which cloud services are often built upon, have to be '''large''' in order to offer competitive advantages to their customers (as pertains to this article, particularly product manufacturers), there are very few cloud computing providers in existence. Thus, every one of them operates the infrastructure under a large number of cloud services.


Some of the most famous cloud providers include Amazon Web Services, Microsoft Azure, Google Cloud and Oracle Cloud
Some of the most famous cloud providers include Amazon Web Services, Microsoft Azure, Google Cloud and Oracle Cloud.


While they take great care to ensure their smooth operation, they sometimes fail and cause widespread service disruptions because of the great number of companies relying on their services.{{Citation needed}}
While they take great care to ensure their smooth operation, they sometimes fail and cause widespread service disruptions because of the great number of companies relying on their services.<ref>{{Cite web |date=2025-10-21 |title=Amazon says AWS cloud service back to normal after outage disrupts businesses worldwide |url=https://www.reuters.com/business/retail-consumer/amazons-cloud-unit-reports-outage-several-websites-down-2025-10-20/ |website=Reuters}}</ref><ref>{{Cite web |date=2025-10-09 |title=Kubernetes kicks down Azure Front Door |url=https://www.theregister.com/2025/10/09/kubernetes_azure_outage/ |website=The Register}}</ref><ref>{{Cite web |date=2024-10-24 |title=Multiple GCP services impacted in the europe-west3-c zone |url=https://status.cloud.google.com/incidents/e3yQSE1ysCGjCVEn2q1h |website=Google Cloud Service Health}}</ref>


===Ineffective access controls===
===Ineffective access controls===
A service provider requires some level of access to the data it processes. Unless access to the service is engineered on consumer's side to minimize such access (e. g. end-to-end encryption), all of the processed data is visible to the service provider<ref name=":0" />, where it can be leaked as a result of a cybersecurity incident or used for purposes to which consumers did not consent (such as included in machine learning datasets{{Citation needed}} or sold to advertising companies{{Citation needed}}).
A service provider requires some level of access to the data it processes. Unless access to the service is engineered on consumer's side to minimize such access (e. g. end-to-end encryption), all of the processed data is visible to the service provider<ref name=":0" />, where it can be leaked as a result of a cybersecurity incident or used for purposes to which consumers did not consent (such as included in machine learning datasets{{Citation needed}} or sold to advertising companies{{Citation needed}}).


Providers may offer some access controls for the data they possess and process, but most of the time they are also the ones enforcing them, which renders them ineffective for restricting providers' access due to a conflict of interest. There may be legally binding promises of effectiveness of these controls in the [[End-user license agreement|EULA]],{{Citation needed|reason=I would have thought ToS would be more typical for cloud services, rather than EULA (more usual for an item than a service)?  [Don't really need a citation, if EULA is what they usually use]}} but violations of policies established through these controls are difficult to detect and legal enforcement is generally difficult.
Providers may offer some access controls for the data they possess and process, but most of the time they are also the ones enforcing them, which renders them ineffective for restricting providers' access due to a conflict of interest. There may be legally binding promises of effectiveness of these controls in their [[terms of service]], but violations of policies established through these controls are difficult to detect and legal enforcement is difficult in general.


===Less legal protection===
===Less legal protection===
Line 41: Line 41:
===Loss of control===
===Loss of control===
Service company can deprive you of your data/services.  For example if you lose login credentials, as might happen when a person dies, or your account is stolen, or the service provider terminates the account.  (see for example,  [[Microsoft account]], [[Google account]]).
Service company can deprive you of your data/services.  For example if you lose login credentials, as might happen when a person dies, or your account is stolen, or the service provider terminates the account.  (see for example,  [[Microsoft account]], [[Google account]]).
==Alternatives==
===Generic protocols===
A lot of cloud services use needlessly specialized protocols, which allows service providers to maintain monopolies over their respective niches. Use of more generic protocols provides more choice to consumers, incentivizes competition between service providers and creates business opportunities for new service providers to emerge.
For example, the impact of [[Amazon PhotosPlus discontinuation]] would be minimal if it were to allow connection to generic file storage rather than relying on Amazon's specialized photo storage service.
===Self-hosting===
{{Main|Self-hosting}}
Some cloud services can be adequately replaced with self-hosted alternatives, where consumers run compatible software on hardware they control.


==Examples==
==Examples==
{{Incomplete section}}
*File synchronization services like [[wikipedia:Dropbox|Dropbox]], [[wikipedia:Google_drive|Google Drive]], [[OneDrive]], [[ICloud]], [[Mega.io cloud storage service|Mega]].
 
*Remote device access, as in [[Wyze|Wyze cameras]] and [[Bosch Cloud Dishwasher Incident|select Bosch dishwashers]].
*Data storage and synchronization, where changes to data are propagated to all devices with access to it. Examples include file synchronization services like [[wikipedia:Dropbox|Dropbox]] and [[wikipedia:Google_drive|Google Drive]].    [[OneDrive]] [[ICloud]] [[Mega.io cloud storage service]]
*[[Software as a service]] online applications, like Google Workspace, [[Microsoft Office 365]], [[Adobe creative cloud]], [[Games as a service]].
*Device access, where functions from an internet-connected device can be accessed from another device with an internet connection, possibly very far. This is especially common when a product requires a companion mobile app.
*AI compute (inference) servers which power AI chatbots and agents. (for example, [[Google Gemini]], [[ChatGPT]], [[Microsoft Copilot]]).
*[[Software as a service]] online applications, like Google Workspace, [[Microsoft Office 365]], conferencing, e-mail, [[Adobe creative cloud]], [[Games as a service]]
*AI compute (inference) servers which power AI chatbots and agents.


==Further reading==
==Further reading==

Latest revision as of 05:06, 22 October 2025

Article Status Notice: This Article is a stub


This article is underdeveloped, and needs additional work to meet the wiki's Content Guidelines and be in line with our Mission Statement for comprehensive coverage of consumer protection issues. Learn more ▼

In consumer technology, a cloud service typically refers to a data processing service provided by a service provider (often product manufacturer), often for a periodic fee. Typical examples of such services include data storage, off-device data processing, easy access to an internet-connected device from anywhere with an internet connection and synchronization between devices.

The term "cloud services" borrows from a term cloud computing, which cloud services are often built upon. However, a "cloud service" may refer to a data processing service provided by the manufacturer that is not based on cloud computing. A typical defining feature of a cloud service is lack of information about the infrastructure that processes the data.

How it works

[edit | edit source]

When features of a product rely on data processing outside of consumers' devices, there has to be another device responsible for these functions.

Cloud services function on devices provided by a service provider, with their specifics or even existence hidden from the user behind user interfaces in an effort to simplify user experience.

One adage is often quoted in relation to cloud services: "There is no cloud, it's just somebody else's computer"[1]. This means that the failure of a device you know nothing about can result in your device/service not working.

Why it is a problem

[edit | edit source]

Economic non-sustainability

[edit | edit source]

Operating a cloud service requires ongoing expenses for the entire duration for which that service is provided. Marketing professionals realize that requiring an ongoing expense from the user for a given product reflects negatively on its perception, and sometimes try to hide this by doing any of the following:

  • Offering additional features or service capacity for an additional fee
  • Including a limited amount of service with the product purchase
  • Withholding the information about cloud services being involved in some of the product's functionality and potentially introducing a subscription fee post-purchase for the product to function fully or at all
    • This often happens after the company that previously offered a cloud service is acquired by another company that isn't as concerned with remaining in good standing with customers of the acquired company

In cases where a product does not provide the ability to choose a service it uses, shutdown of the pre-configured cloud service may cause discontinuation bricking or loss of product features.

Service concentration within cloud computing companies

[edit | edit source]

Because cloud computing providers, which cloud services are often built upon, have to be large in order to offer competitive advantages to their customers (as pertains to this article, particularly product manufacturers), there are very few cloud computing providers in existence. Thus, every one of them operates the infrastructure under a large number of cloud services.

Some of the most famous cloud providers include Amazon Web Services, Microsoft Azure, Google Cloud and Oracle Cloud.

While they take great care to ensure their smooth operation, they sometimes fail and cause widespread service disruptions because of the great number of companies relying on their services.[2][3][4]

Ineffective access controls

[edit | edit source]

A service provider requires some level of access to the data it processes. Unless access to the service is engineered on consumer's side to minimize such access (e. g. end-to-end encryption), all of the processed data is visible to the service provider[1], where it can be leaked as a result of a cybersecurity incident or used for purposes to which consumers did not consent (such as included in machine learning datasets[citation needed] or sold to advertising companies[citation needed]).

Providers may offer some access controls for the data they possess and process, but most of the time they are also the ones enforcing them, which renders them ineffective for restricting providers' access due to a conflict of interest. There may be legally binding promises of effectiveness of these controls in their terms of service, but violations of policies established through these controls are difficult to detect and legal enforcement is difficult in general.

[edit | edit source]

In the United States, federal limits on gathering evidence mean you are not usually required to supply a password to unlock a device that you have, however others may be compelled to release your data.

Loss of control

[edit | edit source]

Service company can deprive you of your data/services. For example if you lose login credentials, as might happen when a person dies, or your account is stolen, or the service provider terminates the account. (see for example, Microsoft account, Google account).

Alternatives

[edit | edit source]

Generic protocols

[edit | edit source]

A lot of cloud services use needlessly specialized protocols, which allows service providers to maintain monopolies over their respective niches. Use of more generic protocols provides more choice to consumers, incentivizes competition between service providers and creates business opportunities for new service providers to emerge.

For example, the impact of Amazon PhotosPlus discontinuation would be minimal if it were to allow connection to generic file storage rather than relying on Amazon's specialized photo storage service.

Self-hosting

[edit | edit source]
Main article: Self-hosting

Some cloud services can be adequately replaced with self-hosted alternatives, where consumers run compatible software on hardware they control.

Examples

[edit | edit source]

Further reading

[edit | edit source]

References

[edit | edit source]
  1. 1.0 1.1 Vorobyov, Sergei (2023-05-25). "There is no cloud it's just someone else's computer". Solita.
  2. "Amazon says AWS cloud service back to normal after outage disrupts businesses worldwide". Reuters. 2025-10-21.
  3. "Kubernetes kicks down Azure Front Door". The Register. 2025-10-09.
  4. "Multiple GCP services impacted in the europe-west3-c zone". Google Cloud Service Health. 2024-10-24.