I use SugarSync. They just had (or maybe still have) a 50% off deal. If you want I can give you a referral. Free to try and can easily get more space by referring others.
Ask HN: Secure Dropbox alternatives?
11–20 of 36 posts
Re: Ask HN: Secure Dropbox alternatives?
#12Wuala - http://wuala.com/ All files get encrypted and are stored redundantly. No one unauthorized - not even Wuala as the provider - can access the files.
Does wuala have physical ownership and exclusive, secure physical access to their own servers or is it up on the cloud? If it's cloud, access prevention from snoopy authority cannot be guaranteed, since a single loose warrant could tap every box.
If someone wants to encrypt their data, then they'd probably want to know the physical security around the box holding their data too. Stallman's probably mentioned this at some point.
Re: Ask HN: Secure Dropbox alternatives?
#13Bitcasa is using local encryption:
Re: Ask HN: Secure Dropbox alternatives?
#14tarsnap is the only one that stands out in terms of security. http://www.tarsnap.com/
But thats backup only and theres no real Windows client.
Re: Ask HN: Secure Dropbox alternatives?
#15I personally use SpiderOak[^1], which gives 2GB for free and 100GB/month for 10$ (5$ for edu accounts), and encrypts your data locally, before sending it to the cloud.
Moreover they don't even store your password in the server (sign in is locally handled), and they claim to have a zero-knowledge policy. As other said, you have to ultimately trust them; however the want to release under an open source license their client software, so one should be able, eventually, to check their claims.
[^1]: https://spideroak.com/download/referral/b26d996944aeed4254f6... (careful, it's a referral)
Edit: removed the link inline.
Re: Ask HN: Secure Dropbox alternatives?
#16Wuala - http://wuala.com/ All files get encrypted and are stored redundantly. No one unauthorized - not even Wuala as the provider - can access the files.
Does wuala have physical ownership and exclusive, secure physical access to their own servers or is it up on the cloud? If it's cloud, access prevention from snoopy authority cannot be guaranteed, since a single loose warrant could tap every box. If someone wants to encrypt their data, then they'd probably want to know the physical security around the box holding their data too. Stallman's probably mentioned this at…
I don't know all details but what I know:
- Wuala runs on dedicated machines in (i think three) different data centers. It isn't their own data center though.
- Data is encrypted on the client side.
- Wuala is hosted outside of the US or US jurisdiction
Re: Ask HN: Secure Dropbox alternatives?
#17There are other services which advertise security, but nothing where you actually are likely to audit the code. Even if their security model is better than what Dropbox is now using, you have to factor in availability issues (Dropbox seems more solid as a business than a lot of the others), functionality, etc. You also need to trust the entire development process, release engineering, and knowing your binaries corres…
Is it possible to use Truecrypt in Dropbox without issues?
Sure. But you remove the benefit of syncing small diffs; you pretty much have to sync the entire truecrypt volume.
Re: Ask HN: Secure Dropbox alternatives?
#18There are other services which advertise security, but nothing where you actually are likely to audit the code. Even if their security model is better than what Dropbox is now using, you have to factor in availability issues (Dropbox seems more solid as a business than a lot of the others), functionality, etc. You also need to trust the entire development process, release engineering, and knowing your binaries corres…
Is it possible to use Truecrypt in Dropbox without issues?
Possible, but inconvenient because the whole volume will get synchronized every time you modify a file.
Re: Ask HN: Secure Dropbox alternatives?
#19Earlier quoted context omitted.
Does wuala have physical ownership and exclusive, secure physical access to their own servers or is it up on the cloud? If it's cloud, access prevention from snoopy authority cannot be guaranteed, since a single loose warrant could tap every box. If someone wants to encrypt their data, then they'd probably want to know the physical security around the box holding their data too. Stallman's probably mentioned this at…
I don't know all details but what I know: - Wuala runs on dedicated machines in (i think three) different data centers. It isn't their own data center though. - Data is encrypted on the client side. - Wuala is hosted outside of the US or US jurisdiction
Yep, servers are in europe.
They say in their FAQ that their servers are in secure server farm in Switzerland, Germany and France.
Re: Ask HN: Secure Dropbox alternatives?
#20There are other services which advertise security, but nothing where you actually are likely to audit the code. Even if their security model is better than what Dropbox is now using, you have to factor in availability issues (Dropbox seems more solid as a business than a lot of the others), functionality, etc. You also need to trust the entire development process, release engineering, and knowing your binaries corres…
Is it possible to use Truecrypt in Dropbox without issues?
I use encfs with Dropbox because each file is encrypted separately, rather than a single monolithic container.