I've read the article and the entire comment thread and nobody is talking about the cloud provider itself ... ?
When someone borgs[1] up their data to store at rsync.net we just assume that we are the threat. Of course I don't believe that but it's perfectly rational and we encourage people to think of rsync.net as a threat as they design their backups.
Comments in this thread are actually discounting the threat of Amazon personnel, GCS personnel, etc., as if that threat was zero.
Not only is it non-zero, I would go further: if you're storing the data on AWS and generating your keys on AWS and managing your keys with AWS ... you're doing it wrong.
When someone borgs[1] up their data to store at rsync.net we just assume that we are the threat. Of course I don't believe that but it's perfectly rational and we encourage people to think of rsync.net as a threat as they design their backups.
Comments in this thread are actually discounting the threat of Amazon personnel, GCS personnel, etc., as if that threat was zero.
Not only is it non-zero, I would go further: if you're storing the data on AWS and generating your keys on AWS and managing your keys with AWS ... you're doing it wrong.
[1] https://www.borgbackup.org/