Live data from Hacker News

It’s Amazon’s Swamp Now

vanityfair.com

61–70 of 93 posts

Re: It’s Amazon’s Swamp Now

#61

Earlier quoted context omitted.

The cottage industry around this specific contract is going to be massive. Whats really interesting though, is that, a huge swath of talent will be ineligeble to work on this as GovCloud/FedRamp requirements for US Citizen employees, physically located in the US to be able to access and work on any of these systems really does impose some limits on the pool. And while, regardless of how you look at this, it is dysopi…

a huge swath of talent will be ineligeble to work on this as GovCloud/FedRamp requirements for US Citizen employees That doesn't stop some DoD contractors from still subcontracting foreign nationals. Crazy what goes on. Question: How do you vet a non-citizen for work on a DoD system? Let me give you a tiny example. Let's say you have a system for keeping track of jet parts. Super important stuff. What's to say a fore…

>...a competing state would be foolish not to try it.

Yeah, there is no way that this contract is not the largest target possible...

I am honestly fascinated and really interested in the cyber-warfare that has, is and will be going on.

Just thinking about Stuxnet/Duqu is pretty amazing - the things that are going on that we don't currently know about and the things that will happen are very interesting.

What I would like to determine, as an emergent tell of the electronic warfare between states is the true disposition between "enemies" -- i.e. we know that Iran and Israel really are enemies and assassinating targets of opportunity (stuxnet ++ engineers previously killed), but it should be telling when publicly on state denounces another (e.g. US denounces NK), but then doesnt take any back-channel actions against the state - or the reverse...

Re: It’s Amazon’s Swamp Now

#62

Why would such a massively important backbone of US defense want to rely on only a single provider? It should be using all 3 of the major players (or others) and even some on premise stuff. This seems like a nightmare waiting to happen, and crony capitalism at its finest. The fact that Amazon says in the article that using fail overs to other providers is some hassle...is just amazing.

Amazon employee here so I am biased. While multi-cloud might give you more redundancy, it: a) prevents you from using any of the custom features that many each service great (for instance lambda, aurora, dynamodb or in the case of google cloud, some of their ML tech). Might as well use on-prem if you’re not going to using AWS/Azure/GSuite feature on top of IaaS b) requires you to set up multiple alarms, logs, metrics…

> d)while this may give you long term negotiating power, you will likely just save more money with long term exclusive contracts.

Uh, This would be true, if one expected prices (and technology) to remain stable, but since that isn't the case, maintaining re-negotiating power is quite a bit more advantageous than you imply.

Re: It’s Amazon’s Swamp Now

#63

While this does seem like an insiders rigged game, is that necessarily bad? Business is about relationships. It’s has always been this way and will always continue to be this way. People do business with people they know and like. While the govt is not technically a business as such, awarding a contract is still a business transaction. If the DOD know and trust people at amazon to do a good job, then why shouldn’t am…

It seems like you're asking "why have any sort of accountability in awarding a transaction worth $10 billion of taxpayer money?"

Here is how corruption works:

Many, many years ago, I was a contract mainframe technician and I worked on local government systems. One day, a colleague offered me a deal: he'd make sure I got a $10,000 contract for a very easy gig with a local city government, but I had to give him $2,000 and I had to give the city government purchaser $2,000. So I'd clear $6,000 for a weekend's work. (The $4,000 bribes are called "kickbacks" if you've heard that phrase before in news stories about public corruption trials.)

Now if you think that's an OK way to spend taxpayer money, you need to take an ethics class. (Hint: it's not OK, because an ethical city purchaser would have contracted it out for a much cheaper price and not tried to wet his beak.)

Obviously I said no.

Now, scale that $4,000 corruption loss on a $10,000 project up to a TEN BILLION DOLLAR project.

You ask "who cares?" I reply: everyone who pays US taxes and especially everyone who follows the anti-corruption procurement practices.

Re: It’s Amazon’s Swamp Now

#64

Seems a bit too tailored though - "To even make a bid, a provider must maintain a distance of at least 150 miles between its data centers, a prerequisite that only Amazon can currently meet. JEDI also asks for “32 GB of RAM”—the precise specification of Amazon’s services. (Microsoft, by contrast, offers only 28 GB, and Google provides 30 GB.) In places, JEDI echoes Amazon’s own language: It calls for a “ruggedized” s…

Way out of date, too. I suspect the reporting should have been fact checked, or updated. https://cloud.google.com/compute/pricing I guarantee that Google has more than 150 miles between data centers ;)

[deleted]

Re: It’s Amazon’s Swamp Now

#65

More concerning is the fact that the UK government is happy to store UK data in the US with AWS under its "G-cloud" scheme. At least the US guys have picked a "local" vendor.

G-cloud is a pretty broad scheme that covers all sorts of computing services and consulting at all levels of secrecy. It's a marketplace with many different uses.

If you do a search with, for example, a minimum provider staff security clearance of DV (which is pretty high, would apply to many matters of national security), all the major cloud providers disappear from the results, and you get smaller companies based in the UK, who use UK datacenters, and who are seemingly adding their own layers of encryption on top.

Re: It’s Amazon’s Swamp Now

#67
post #14

Seems a bit too tailored though - "To even make a bid, a provider must maintain a distance of at least 150 miles between its data centers, a prerequisite that only Amazon can currently meet. JEDI also asks for “32 GB of RAM”—the precise specification of Amazon’s services. (Microsoft, by contrast, offers only 28 GB, and Google provides 30 GB.) In places, JEDI echoes Amazon’s own language: It calls for a “ruggedized” s…

It sounds like the military wants what Amazon can provide, but is allowing other competitors to step up and give it a better deal. There are obvious reasons why a military customer would want distance between data centers and ruggedized storage, that's surely one of the reasons why Amazon has implemented them.

I think the major concern perhaps isn't the particulars of the spec, or even that maybe only Amazon can fully meet some of them, but that they are so clearly based on Amazon's exact capabilities that it raises the question of whether another provider will even get a fair hearing.

As an analogy, imagine that there's a new senior job opening in your organisation, and both you and a colleague are considering applying. You're both pretty skilled, with resumes that are quite similar, albeit not identical. You hear through the grapevine that you co-worker plays golf with a couple of the people who'll be on the interview panel, but you trust them to be impartial.

Then the official job description gets published, and it's identical to your colleague's resume. It's as if somebody has gone through it line by line and translated that into the job's desirables. In some cases, the requirements are verbatim copies of some experience your colleague mentions.

Now, you're convinced that you could still do the job. And perhaps if you really knock it out of the park during the interview, and make a deliberately lowballed salary demand, you've got a chance. But, at this point, would you believe that the process is impartial? Or would you conclude that, at the very least, it is so stacked heavily in favour of your colleague that your chances of swaying the interviewers over to your side are slim, and perhaps nonexistent?

Re: It’s Amazon’s Swamp Now

#68

More concerning is the fact that the UK government is happy to store UK data in the US with AWS under its "G-cloud" scheme. At least the US guys have picked a "local" vendor.

G-cloud is a pretty broad scheme that covers all sorts of computing services and consulting at all levels of secrecy. It's a marketplace with many different uses. If you do a search with, for example, a minimum provider staff security clearance of DV (which is pretty high, would apply to many matters of national security), all the major cloud providers disappear from the results, and you get smaller companies based i…

Is the interface for such a search publicly accessible?

Re: It’s Amazon’s Swamp Now

#69
> To even make a bid, a provider must maintain a distance of at least 150 miles between its data centers, a prerequisite that only Amazon can currently meet

I don't get this one.

Azure's government data centers are in Virginia, Iowa, Arizona, and Texas. Their DoD data centers are Virginia and Iowa. I don't know where they are in those specific states, but the only pair that could be less than 150 miles apart are Texas and Arizona, and that is only if the Arizona one is within a few miles of the SE corner of Arizona and the Texas one is up in the NW sort-of corner of Texas.

Re: It’s Amazon’s Swamp Now

#70
post #14

Earlier quoted context omitted.

It sounds like the military wants what Amazon can provide, but is allowing other competitors to step up and give it a better deal. There are obvious reasons why a military customer would want distance between data centers and ruggedized storage, that's surely one of the reasons why Amazon has implemented them.

I think the major concern perhaps isn't the particulars of the spec, or even that maybe only Amazon can fully meet some of them, but that they are so clearly based on Amazon's exact capabilities that it raises the question of whether another provider will even get a fair hearing. As an analogy, imagine that there's a new senior job opening in your organisation, and both you and a colleague are considering applying. Y…

When I was in college, I was a systems administrator for a lab as a part-time student job. After I graduated, they wanted to hire me full-time. But it was a state university, so they had to open up the job to everyone, and they had to have a specific window for applications. So... my boss wrote the job description exactly around my resume. Lo-and-behold, I got the job.
Post reply on HN