Live data from Hacker News

Amazon Quantum Ledger Database

aws.amazon.com

21–30 of 183 posts

Re: Amazon Quantum Ledger Database

#21

As they pointed out, this requires me to trust Amazon. But since that's the case, what's the point of it being auditable? Amazon can easily drop the last N transactions on your ledger and tell you the digest you provided was "not found".

They could, but why would they?

Re: Amazon Quantum Ledger Database

#25
post #13
post #7

Earlier quoted context omitted.

That doesn't give you the ability to cryptographically verify integrity of the database. Think git repository with pgp signature on every commit.

I think once centralized, there is inherently something wrong with blockchains. There is always chance of bait and switch, even though you trust amazon.

QLDB != Blockchain. It does not use blockchain at all.

Re: Amazon Quantum Ledger Database

#26

As they pointed out, this requires me to trust Amazon. But since that's the case, what's the point of it being auditable? Amazon can easily drop the last N transactions on your ledger and tell you the digest you provided was "not found".

Amazon could leak your secrets stored in Secrets Manager, or KMS.

ACM could leak your private keys.

EC2 hypervisor could have a 0day that allows China to steal all your data.

CloudTrail could drop audit logs.

At some point, you have to trust the company who's software you're using. Sure Amazon could easily drop the last N transactions, but what motivation do they have to do so? What behavior in the past makes you think this wuold happen?

Re: Amazon Quantum Ledger Database

#27
post #21

As they pointed out, this requires me to trust Amazon. But since that's the case, what's the point of it being auditable? Amazon can easily drop the last N transactions on your ledger and tell you the digest you provided was "not found".

They could, but why would they?

Indeed, they wouldn't - but the product offering sounds like they are telling customers that they can audit their data and that it is cryptographically verifiable - but why does the customer care about this, unless they don't trust amazon to preserve data integrity?
Post reply on HN