21–30 of 194 posts
Isn't it impossible to really delete something from ipfs? I'd think that would make this dangerous, as any security flaw would be impossible to fix retroactively. Everything before the flaw would be compromised and can't be reencrypted safely. If a passphrase was lost, the security of every past file would be at risk. This is what has kept me from approaches like this in the past.
Yes, that's one reason I'm really not sold on storing private data on IPFS and similar services.
Isn't it impossible to really delete something from ipfs? I'd think that would make this dangerous, as any security flaw would be impossible to fix retroactively. Everything before the flaw would be compromised and can't be reencrypted safely. If a passphrase was lost, the security of every past file would be at risk. This is what has kept me from approaches like this in the past.
An e2e Dropbox alternative would be great. Though for it to actually count as a Dropbox alternative (to me) it would need: 1) a Linux app 2) an Android app 3) on-demand syncing, aka "smart sync"
Are you looking for Syncthing? https://syncthing.net/
https://en.m.wikipedia.org/wiki/EncFS
Also, mega.nz
Earlier quoted context omitted.
How do you prevent yourselves from serving a version of the web app that sends the user’s seed phrase to yourself? (A malicious employee could do such a thing, or you could be legally obligated to do so in order to continue operating in certain jurisdictions.)
How is this problem specific to web apps? How do you prevent yourself from serving a compromised iOS/Android/Mac/Windows app? Same answer.
For app store based distribution, the developers can set up a deterministic build, and end users can verify the checksum of the package matches the developer’s published source code (signal supports this).
I don't need that. I can just set up an SFTP server and rsync my files to it.
And, perhaps more interestingly, why would this become popular where BT Sync failed to live up to the hype?
Furthermore, storage can be paid for by crypto. Does this mean the storage is linked to some kind of cryptocurrency, or is there some kind of central payment system that converts crypto into actual value in the system?
Earlier quoted context omitted.
How is this problem specific to web apps? How do you prevent yourself from serving a compromised iOS/Android/Mac/Windows app? Same answer.
Isn't this a promise of open source? User doesn't have to get a binary from someone, they could, build from source (given experience+time)
Earlier quoted context omitted.
How is this problem specific to web apps? How do you prevent yourself from serving a compromised iOS/Android/Mac/Windows app? Same answer.
Isn't this a promise of open source? User doesn't have to get a binary from someone, they could, build from source (given experience+time)