News: 1646645408

  ARM Give a man a fire and he's warm for a day, but set fire to him and he's warm for the rest of his life (Terry Pratchett, Jingo)

Enterprise IT finds itself in a war zone – with no script

(2022/03/07)


Opinion Trade embargoes are powerful weapons, especially in wartime. They used to be very visible: naval blockades had huge impacts against the [1]Confederacy in the American Civil War and, 50 years later, Germany in the First World War.

The [2]Battle of the Atlantic in the Second World War nearly sank the UK.

[3]

The Moscow head office of majority state-owned Russian banking and financial services company Sberbank

Now Russia is in an illegal war against Ukraine, and sanctions against it are the rest of the world's first choice of persuasion. [4]Financial services , new goods and spare parts, travel, all these things are part of an established playbook. Information technology is less so, and when it comes to cloud services and infrastructure, there are far more questions than answers.

Russia's dependence on Western enterprise IT is huge. Its domestic capabilities have improved beyond measure since the collapse of the Soviet Union in 1991, when decades of catastrophic mismanagement left it with no IT industry whatsoever. Cheap hardware and the global online infrastructure allowed it to develop a capable and productive software workforce. Free to use the same tools as the rest of us, big outfits could start to become competitive and entrepreneurs could expect a level playing ground.

Suddenly, that's no longer true. Within a week of the invasion, the list of Western companies that won't sell to Russia is startling – [5]Intel, AMD, Apple – and, more ominously for business, [6]stalwarts Oracle and SAP removing or reducing their presence significantly. As an opening salvo, it gets attention: but the real action awaits.

[7]

Removing web apps and services from Russia, especially those for organisations, would be devastating. Russia's own cloud providers have been slow to develop, with the two biggest – Yandex and Mail.ru – coming in fourth and fifth on its home turf, well behind Amazon, Microsoft and Google in a [8]2020 research report from analyst PwC .

[9]

[10]

Good luck building out more capacity when you can't buy server chips, and good luck running an economy without the tools and platforms that have come to define modern enterprise's information DNA over the past five years.

What next?

So far, though, the embargoing of primary cloud infrastructure and on-demand services hasn't happened, and there's no route forwards in direction or timing.

There's no reason to believe this is through lack of will or fear of losing revenue, no indication that service providers are somehow less willing to move than other industry sectors. It's not happening because nobody's done this before, nobody knows how to do it, and nobody's taking the lead.

Of these aspects, the lack of leadership is the most pressing. That's not the sector's fault: effective embargoes need coherent and unambiguous governmental and regulatory guidance, neither of which are visible.

[11]

If you're told you can, preferably must, do something by lawmakers or state agencies, you can escape contractual liability through force majeure, the principle that when something you can't control prevents you from fulfilling an agreement, this absolves you from legal responsibility.

Without that, you can do things like cease selling your product or renewing contracts, less so cut loose existing deals. Turning off the taps means exactly that.

Then there's the fear of going out on a limb, something which again needs strong leadership, this time from within the industry.

[12]

If you pull your services from a market but your competitor does not, especially if migration is easy, you won't harm anyone but yourself. This is a multi-dimensional fear: do you take action, what do you do, how much do you take, who do you take it against?

This gets worse the further down the stack you go: whether you withdraw your application or not is up to you, but if you're looking at blocking entire classes of access on a regional or blacklist basis, that has [13]many more ramifications – just ask ICANN.

[14]Here's why prolonged Russia-Ukraine war would be really bad for us, say chip designers

[15]Europe's largest nuclear plant on fire after Russian attack

[16]ICANN responds to Ukraine demand to delete all Russian domains

[17]Switzerland's SWIFT data centre under guard after Russian banks excluded

Plus, in a war where access to and control of information to individuals – the B2C side of cloud sanctions – there are infinite imponderables. Russian President Vladimir Putin's entire strategy depends on controlling what Russian citizens know, think and decide among themselves; sanctions that strengthen his hand here would be agonisingly counterproductive. Decisions, decisions.

The reaction of IT services, especially at infrastructure level, is important, urgent, and vastly consequential. It needs alignment of sector regulators, government policy makers and CEOs, across trading blocs, countries and regions.

Nobody is at fault here, not yet: there is no how-to video for sanctioning a rogue yet highly interconnected state. We've only learned in the last seven days that we can do sanctions at speed at all.

The path to escalation must be closed, the de-escalation of the violence towards 40 million people must be pushed as hard as possible, and cutting off the ability of Russian organisations to handle their information is a big stick indeed. More, there's the [18]other, much larger, much more technologically advanced authoritarian state on the other side of the world, watching with great interest how we handle this.

This columnist is no fan of hyperbole: here, none is possible. The stakes could not be higher, and there's one shot at getting it right. The fog of war must give way to the cloud at war, or the storm will be fierce indeed. ®

Get our [19]Tech Resources



[1] https://history.state.gov/milestones/1861-1865/blockade

[2] https://www.iwm.org.uk/history/what-you-need-to-know-about-the-battle-of-the-atlantic

[3] https://regmedia.co.uk/2022/03/04/shutterstock_sberbank.jpg

[4] https://www.theregister.com/2022/03/02/oracle_sap_sberbank/

[5] https://www.theregister.com/2022/03/04/chipmakers_ukraine_supplies/

[6] https://www.theregister.com/2022/03/02/oracle_and_sap_suspend_business/

[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offprem/paasiaas&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2YiXl283oxa57kEhTRB2oSwAAAEg&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0

[8] https://incountry.com/blog/global-clouds-and-cloud-providers-in-russia/

[9] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offprem/paasiaas&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YiXl283oxa57kEhTRB2oSwAAAEg&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[10] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offprem/paasiaas&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YiXl283oxa57kEhTRB2oSwAAAEg&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[11] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offprem/paasiaas&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YiXl283oxa57kEhTRB2oSwAAAEg&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[12] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offprem/paasiaas&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YiXl283oxa57kEhTRB2oSwAAAEg&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[13] https://www.theregister.com/2022/03/03/icann_ukraine_russian_domains/

[14] https://www.theregister.com/2022/03/04/chipmakers_ukraine_supplies/

[15] https://www.theregister.com/2022/03/04/zaporizhzhia_nuclear_power_plant_fire_battle/

[16] https://www.theregister.com/2022/03/03/icann_ukraine_russian_domains/

[17] https://www.theregister.com/2022/03/03/swift_data_centre_under_guard/

[18] https://www.theregister.com/2022/03/02/china_us_russia_sanctions_tangle/

[19] https://whitepapers.theregister.com/



How an org should consider exiting RU - Krebs Stamos Group

Dave Null

I thought this was an excellent article

https://intel.ks.group/p/controlled-shutdown?s=09

How an org should create a plan to exit a hostile country safely.

Excellent

Anonymous Coward

Very good indeed.

I couldn’t agree more. The time for leadership is indeed now.

Stand up and be counted Cloud providers.

Want to get out without breaking contract?

TiredNConfused80

Simply change your login landing page (if it's a cloud portal then it is the company you are siging in to that controls that page) into something that shows images of the latest Russian War crime. Then make sure that anyone signing in from Russia has to re authenticate at least weekly.

I'm pretty sure the company will be banned pdq from the customer end and you have done nothing that you could be taken to court for.

Cutting Russia off from the InterWebs is stupid

Dr Paul Taylor

In past wars, getting your message to the population of the enemy country required flying over them and dropping leaflets.

The Internet and Web make this far easier. Just hijack (some) port 80 connections out of Russia and make people watch videos of the effects of bombing Ukraine and what captured conscripts think, before redirecting to the intended site.

But also bear in mind that all this will force dictators to be more IT-self-sufficient, so the effectiveness of such measures will be reduced next time round.

Taiwan, for example. China is taking notes.

The West will have this chance only once...

Custard Fridge

Information is, as has been said to me several times over 30 years in IT, the new utility that we cannot do without.

Having the ability to reduce the opposition's major companies to their knees is indeed a very new & powerful tool indeed.

Cutting off multiple industries from their primary / secondary systems for production, monitoring, HR, payroll, sales, purchasing, design - it's as if the West suddenly realises it has keys to most of the virtual filing cabinets in Russia. It can lock them shut, or indeed incinerate the contents.

This will only happen once.

5-10 years from now, China will have those keys.

Re: The West will have this chance only once...

Doctor Syntax

"5-10 years from now, China will have those keys."

Given that western countries have spent the last few decades steadily pushing their more and more of their supply chains to China, whose fault is that?

Doctor Syntax

"Of these aspects, the lack of leadership is the most pressing. That's not the sector's fault: effective embargoes need coherent and unambiguous governmental and regulatory guidance, neither of which are visible."

Formally that second sentence might be true. In reality, however, the industry could, and arguabley should, be telling the government and regulatory bodies of what's needed. The lack of leadership isn't as implied, all on the governmental side.

So in the future, one 'client' at a time or you'll be spending CPU time with
lots of little 'child processes'.
-- Kevin M. Bealer, commenting on the private life of a Linux nerd