Hacker News new | ask | show | jobs
by kakwa_ 3648 days ago
This offer is really strange.

It claims lot of guaranties for your data (99,999999999% durability).

It claims to be secure against all natural and human destruction, despite being located in only one datacenter, 25 meters under the ground, in Paris, which means it could be subject to floods (directly or indirectly).

It claims to be able to handle formats that don't exist yet (for example, LTO-1 to LTO-10, the most recent version of the media being LTO-7).

It claims (with a footnote) to be able to handle "Secret Défense" data, which is extremely dubious. "Secret Défense" is the second most restricted classification in France. It's for highly sensitive information. Companies dealing with "Secret Défense" have to put many security measures in place (proper access control, separated networks, personnel habitation by the government, physical protection, tracking of every copy of every documents...) and are regularly audited by the government. The penalties for messing with that kind of data are pretty harsh, you could spend several years in prison if you publish an SD or just a CD (Confidentiel Défense) document, even accidentally.

Even if it's clearly targeting backup of state related data, it doesn't seem to have been audited by the ANSSI (french National Agency for Computer Security).

What is weird is that Online is a well established company (the parent company, Iliad is 4 billions euros in revenue).

1 comments

Well, the shelter is still actually quite higher in Paris than the Seine (and quite far from it too), floods are not a concern at all in the area of this datacenter.

Regarding the LTO format, well LTO-10 seems to exist from what Google tells me (but I am no expert there to be honest ;)

As for the Secret Defense certification, this is ongoing, and, as you stated, we are part of a larger group which already have lots of relation with institutions like ANSSI but we (Online) have also been working with them to be certified in the coming months, of course this is a long and tedious process (as every certification is sic), but we are working on it every day and we see no reason we could not get to the end of it, we have a complete team of guys working on completing all the certifications displayed on the website and we are working with all our teams to get things done right for this.

The whole C14 infrastructure itself has been carefully designed from the beginning with people knowing all the certifications requirements to make sure nothing could get in the way to pass the certifications for it.

Hope this clears a bit your worries,

Mik (Online.net network)