Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Nextcloud: Open-Source Cloud Apps

nextcloud.com

Post reply on HN
Print view View original

81–90 of 250 posts

Re: Nextcloud: Open-Source Cloud Apps

#81

Post by touggourt »

ezst wrote: post #19
kkfx wrote: post #5

Honestly I do not favor this paradigm, no matter if NextCloud, O360, SandStorm and alike: the point is that we should teach the desktop paradigm, syncing data around, not using desktops as monsters, hyper-expensive thin clients or more properly dumb terminals of a remote "mainframe". It's easy today because current IT evolution is totally skewed, derailed for commercial reasons, but that's untenable. Who think it's n…

> Honestly I do not favor this paradigm I think you are not alone, but I also wouldn't be surprised if this frog is boiled so slow that our opinion eventually becomes irrelevant: today's teenagers are *less* proficient on a keyboard than their elders, because they no longer "type" but "tap" instead. When the average exposure to computing is reduced to dumbed-down "consumption-only" devices running iOS/Android, and th…

The new paradigm is smartphones firts, not only for childrens.

Re: Nextcloud: Open-Source Cloud Apps

#82

Post by obnauticus »

notepad0x90 wrote: post #45
obnauticus wrote: post #20

I originally wanted to do this but the CVE history is a bit too colorful for something I’d want to trust as a “cloud replacement”: https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=nextcloud A common misconception IMO is that running and owning your own infrastructure is somehow more secure. To that I lol, and I’m confident that the thousands of AWS/GCP/Azure/iCloud security engineers are all doing a more thorough job…

I would dig a bit more into the breakdown of the CVEs: https://www.cvedetails.com/product/34622/Nextcloud-Nextcloud... As well as if this reflects a systemic issue with the codebase or if it is just getting much needed attention from security researchers. More CVEs can just mean they're cleaning up after vulns really well. But at the same time, if they have critical vulns over and over again, that might indicate bad…

Agreed. The breakdown is indeed pretty poor IIRC.

Generally you use these disclosures to make directional decisions about infrastructure. The list of fixed and disclosed CVEs combined with the legacy PHP code base doesn’t really pass the security sniff test. You really wouldn’t know for sure without doing a full code audit.

Re: Nextcloud: Open-Source Cloud Apps

#83

Post by bravetraveler »

uselpa wrote: post #78
bravetraveler wrote: post #43

Earlier quoted context omitted.

One doesn't have to expose it to malicious actors. It is most-useful that way, sure. Mine is at 10.27.0.68 . Have fun, hackers! Also, I lol at most CVEs. Butterfly farted outside, oh uh. Take the top one: In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files (between the server and client) may become world writable or world readable. This is fixed in 3.13.4. You mean to tell me a few minor po…

I find that one concerning in an enterprise setup (which they target). Or the fact that the desktop client has 999 open issues. Or that the last version silently takes you off the stable channel. I could go on … Nextcloud desktop has severe quality control issues.

An enterprise setup where people share machines, sure. There are plenty of reasons to be afraid [and mitigations], no need to find them.

Either take control or sell/outsource it, no skin off my teeth. I was replying to someone making the case for 'just trust Google/whoever, lol'

My point is this nears hysterical fearmongering. I'd prefer if you don't go on, but it's more for your benefit.

Stopping before I start my own rant about risk tolerance

Re: Nextcloud: Open-Source Cloud Apps

#84

Post by hypeatei »

ReptileMan wrote: post #44
obnauticus wrote: post #20

I originally wanted to do this but the CVE history is a bit too colorful for something I’d want to trust as a “cloud replacement”: https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=nextcloud A common misconception IMO is that running and owning your own infrastructure is somehow more secure. To that I lol, and I’m confident that the thousands of AWS/GCP/Azure/iCloud security engineers are all doing a more thorough job…

>A common misconception IMO is that running and owning your own infrastructure is somehow more secure. If done properly cve-s don't matter that much. You create a headscale install on a pi and the headscale port and your router's ssh (key only) are the only things visible from the outside. Take any other than a home router - aka something with support. And you are done.

> If done properly cve-s don't matter that much.

I think it depends on the CVEs and where they are. If it's a software vuln that requires root or some other complex prerequisites then w/e. But, if we're talking about low level problems in either the OS or network layer (e.g. firewalls, routers) then big clouds are most likely going to have that patched and rolled out more quickly IMO.

Re: Nextcloud: Open-Source Cloud Apps

#85

Post by solarkraft »

antman wrote: post #25

Lets not forget iPhone vendor lock in that specifically slows down or entirely closes background connections for all other vendors except Apple. So syncing files with Nextcloud or any other app except Apple cloud is an exercise in undocumented futility. You can put it as a front application and wait (if corporate hasn’t forced a screen turning off timeout)

Syncthing (via Möbius Sync) works quite (surispsibgly!) well on iOS, but there are still many paper cuts. I‘d have hoped the DMA would have forced platforms to be decoupled from services.

Re: Nextcloud: Open-Source Cloud Apps

#86

Post by touggourt »

johnchristopher wrote: post #40
Propelloni wrote: post #28

Earlier quoted context omitted.

> their focus has been on developing features for business collaboration as opposed to personal & family ones For people like me, who have to contend with GDPR and NIS 2 requirements on an organizational level in Germany this actually is a god-send. MS and Google don't play nice with the local law, e.g. refusing order processing agreements, although MS has recently started to move on this topic. We replaced MS stuff…

Hi, we are evaluating at work. Could you shed some light on these questions ? Do you have one NC instance or do you federate (or plan to) ? Do you use the mail app ? Which applications do you use to replace sharepoint features ? Do you use the business version of NC ?

IMHO, the mail app is very slow and need a large screen. Also it doesn't help to manage emails when you need to delete, to search for something, to put in folders and to deal with spams. But I am a power users who like to keep thing clean. Some employees works with it without complaining. Nextcloud recently "bought" Roundcube and it might become the prefered mail app sooner.

Re: Nextcloud: Open-Source Cloud Apps

#87

Post by poisonborz »

greatgib wrote: post #60

I like very much Next loud (the idea, the project, some part of the design like storing files flat easily backup able) but my major issue is with the file synchronisation with the Android. It totally does not work. If you try to send or synchronize just a few files it is mostly ok. But when trying to upload more than a few dozen files, things starts to not work well, like transfer being stuck, or the transfer complet…

You shouldn't use NC for syncing, much better options exist. NC is great for sharing files and photos though web or mobile apps.

Re: Nextcloud: Open-Source Cloud Apps

#88

Post by poisonborz »

MrDisposable wrote: post #41

A newbie question: How does Nextcloud compare to Dropbox and Syncthing? Can it serve as a replacement / alternative to them?

Apples and oranges. Syncthing is a selfhosted p2p syncing network and it's miles better for this. Nextcloud is a selfhosted "cloud platform" like Google Apps. How good it is for each use case varies greatly. Most often it is used for easy web/mobile access for files and photos.

Re: Nextcloud: Open-Source Cloud Apps

#89

Post by bpfrh »

obnauticus wrote: post #20

I originally wanted to do this but the CVE history is a bit too colorful for something I’d want to trust as a “cloud replacement”: https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=nextcloud A common misconception IMO is that running and owning your own infrastructure is somehow more secure. To that I lol, and I’m confident that the thousands of AWS/GCP/Azure/iCloud security engineers are all doing a more thorough job…

Running and owning your own infrastructure exposed to the outside world can be more insecure, running your own infrastructure at home in segmented networks with wireguard will solve most problems.

Re: Nextcloud: Open-Source Cloud Apps

#90

Post by saligne »

qwertox wrote: post #71
boramalper wrote: post #15

I started using Nextcloud first to have an alternative to big-tech in case Google locks me out of my account, and then it became my daily driver. It's fast, private, and has mature clients for all major desktop and mobile platforms. Together with OnlyOffice, it's a good-enough substitute for Google Docs Editors (the office suite) for non-collaborative editing. I love self-hosting but file storage is one thing that I…

> I've been paying for Hetzner Storage Share [0] happily to save myself the headache. Assuming you start with NX11, which has 1TB storage, and before hitting the limit you want to upgrade to the 5TB storage, NX21. Can you just call Hetzner and tell them they should upgrade your NX11 plan to NX21 in-place, or will you have to order NX21 and then move all the data over to the new instance yourself?

In place, you don't need to move data yourself to a new instance. You just choose the bigger plan in their web portal.
Post reply on HN