https://www.americanthinker.com/articles/2018/11/google_cloud_is_busted_by_russians_and_chinese.html
Perhaps it is a good thing that Google employees convinced their management not to do business with the Pentagon, thereby pulling out of participating in a $10 billion cloud computing contract called JEDI (Joint Enterprise Defense Infrastructure).
On November 12th, Google’s services were hit by a massive hack allegedly carried out by Russians, Chinese, and Nigerians. The hack redirected all of Google’s search, business, and cloud computing operations through servers run in these countries using a hack called the Border Gateway Protocol (BGP). This gave the hackers unprecedented access to extremely sensitive information on users and direct access to any data that was not independently encrypted (one presumes that the typical computer network security protocols were automatically compromised by being run through servers that did not belong to Google). Even more critically, it gave the three countries complete control over all of Google’s operations and data. While the hack only lasted about an hour and a half, it demonstrated in clear terms just how vulnerable computer networks are and showed that the critical infrastructure could have been taken down, had the hackers wanted to do so.
For the record, the Google Cloud and Google’s G-Suite business services have good security practices, and the Google Cloud in particular has some security features that are quite advanced. But that did not stop the BGP hack, because BGP hacks exploit the IP addresses and information routing addresses that are built into the modern internet. Worse yet, computer experts say that current technology can’t stop a BGP hack.
The Pentagon with its JEDI contract wants to migrate its computer networks to the cloud, and just not any old cloud but a cloud system run by private enterprise that is shared with the public. While the Pentagon doubtlessly will use some form of encryption for its cloud operations, it cannot protect the exploitation of its networks if exposed on a public network. Moreover, the Pentagon has yet to explain how it will back up the system if it fails for any reason.