Live data from Hacker News

Nextcloud: Open-Source Cloud Apps

nextcloud.com

41–50 of 250 posts

Re: Nextcloud: Open-Source Cloud Apps

#42
post #32

I started using Nextcloud first to have an alternative to big-tech in case Google locks me out of my account, and then it became my daily driver. It's fast, private, and has mature clients for all major desktop and mobile platforms. Together with OnlyOffice, it's a good-enough substitute for Google Docs Editors (the office suite) for non-collaborative editing. I love self-hosting but file storage is one thing that I…

If you start on a free plan but then ultimately switch to another provider do you have any idea of how hard it would be to export and import all your tasks, files, etc?

Files are files so you can download them to your computer and upload them to the new provider. Unfortunately I am not aware of any direct provider-to-provider sync.

Application data depends on the app. For example, Notes [0] save your notes as Markdown files so you can move them (along with your files) wherever you want. However, News [1] don't and don't have export/import features at the moment either [2].

Nextcloud as a file storage solution and a non-collaborative office suite is great, but I cannot recommend its apps the same way. They are very convenient to install, but the quality varies a lot in my opinion so evaluate before you adopt.

[0] https://apps.nextcloud.com/apps/notes

[1] https://apps.nextcloud.com/apps/news

[2] https://github.com/nextcloud/news/issues/2503#issuecomment-2...

Re: Nextcloud: Open-Source Cloud Apps

#43

I originally wanted to do this but the CVE history is a bit too colorful for something I’d want to trust as a “cloud replacement”: https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=nextcloud A common misconception IMO is that running and owning your own infrastructure is somehow more secure. To that I lol, and I’m confident that the thousands of AWS/GCP/Azure/iCloud security engineers are all doing a more thorough job…

One doesn't have to expose it to malicious actors. It is most-useful that way, sure. Mine is at 10.27.0.68. Have fun, hackers!

Also, I lol at most CVEs. Butterfly farted outside, oh uh.

Take the top one: In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files (between the server and client) may become world writable or world readable. This is fixed in 3.13.4.

You mean to tell me a few minor point releases imitated umask, making world-readable [and possibly added writable]? Oh no! The tragedy! Keep in mind most clients are single user systems anyway.

Judge them on their facts, there are vulns and then there are vulns. CVEs are a sign of attention on a project. No more or less.

Re: Nextcloud: Open-Source Cloud Apps

#44

I originally wanted to do this but the CVE history is a bit too colorful for something I’d want to trust as a “cloud replacement”: https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=nextcloud A common misconception IMO is that running and owning your own infrastructure is somehow more secure. To that I lol, and I’m confident that the thousands of AWS/GCP/Azure/iCloud security engineers are all doing a more thorough job…

>A common misconception IMO is that running and owning your own infrastructure is somehow more secure.

If done properly cve-s don't matter that much. You create a headscale install on a pi and the headscale port and your router's ssh (key only) are the only things visible from the outside. Take any other than a home router - aka something with support. And you are done.

Re: Nextcloud: Open-Source Cloud Apps

#45

I originally wanted to do this but the CVE history is a bit too colorful for something I’d want to trust as a “cloud replacement”: https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=nextcloud A common misconception IMO is that running and owning your own infrastructure is somehow more secure. To that I lol, and I’m confident that the thousands of AWS/GCP/Azure/iCloud security engineers are all doing a more thorough job…

I would dig a bit more into the breakdown of the CVEs:

https://www.cvedetails.com/product/34622/Nextcloud-Nextcloud...

As well as if this reflects a systemic issue with the codebase or if it is just getting much needed attention from security researchers. More CVEs can just mean they're cleaning up after vulns really well. But at the same time, if they have critical vulns over and over again, that might indicate bad coding practices or carelessness.

Re: Nextcloud: Open-Source Cloud Apps

#47
Honestly, I feel that Nextcloud is full of bloat, the performance is quite disappointing and it's very unstable. I only use it for file storage, because I can't find a better alternative out there. My advice: never upload directories that may have many small files (and certainly not git repos). For photos, don't even think about it. Use Immich or PhotoPrism.

Re: Nextcloud: Open-Source Cloud Apps

#48

Earlier quoted context omitted.

Well, honestly, Apple is not wrong here. App Developers usually don't give a flying cluck about anything other than their apps. Battery, CPU, mobile data? Zero consideration. But then of course the fault lies on Apple (and MS - it's the same thing in Windows - see the CrowdStrike fiasco)

Well, no. This argument might be correct if this policy wouldn't very strongly incentive people to use (possibly paid!) iCloud instead and if Apple would just allow any app onto the app store (or effortless sideloading like on Android). Instead, they heavily scrutinize everything that gets submitted. They could just have special permissions for apps like Nextcloud that would only be enabled if the app behaves correct…

Yes, there is an anti-competitiveness aspect here, and I agree with you that the access to the api should be allowed (given some limits)

But nobody wants to sysadmin their phone with rare exceptions

Re: Nextcloud: Open-Source Cloud Apps

#49

I originally wanted to do this but the CVE history is a bit too colorful for something I’d want to trust as a “cloud replacement”: https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=nextcloud A common misconception IMO is that running and owning your own infrastructure is somehow more secure. To that I lol, and I’m confident that the thousands of AWS/GCP/Azure/iCloud security engineers are all doing a more thorough job…

I'm not a security specialist, but it seems to me that while managed services typically have better security and sysadmin resourcing, they also have the downside that their security can fail at a massive scale. If someone defeated the security of, say, GitHub, they could leak all the private repos stored there.

Managed services also have to accept connections from the public Internet, which on-premises solutions do not.

Re: Nextcloud: Open-Source Cloud Apps

#50
post #38
post #22

Earlier quoted context omitted.

As a self hosting afficionado, I feel like the perfect Google photo replacement doesn't exist yet. I have a synology nas and I use the synology photos app for auto uploading without loss of quality to my nas. Don't forget any picture or videos, deduplicate, figure out what you can safely delete from my phone,... All of that works great and is reliable. The synology photos app to watch your photos though, isn't very g…

Photoprisim Check it out, I've been very happy with that instead of Google photos.

I want to like it but it’s quasi-open source. As far as I understand, from the convoluted FAQ, paid Essentials members can’t access the source code, and they are gatekeeping some quite basic features behind Essentials membership.

Reading between the lines I think it is closer to dual licensed. With extra conditions for the non-public source.

Post reply on HN