AeroFS (YC S10) exits private beta • Hacker News Board

Re: AeroFS (YC S10) exits private beta

#41

Post by rdl » Wed, Apr 03, 2013, 5:39 AM UTC

zarvox wrote: post #34

andymoe wrote: post #33

It is not clear from the site if the data I give to AeroFS is encrypted at rest. There is a section called "End-to-end Security" that states: AeroFS uses AES-256 with 2048-bit RSA to create secure connections directly from one device to another. Because encryption is end-to-end, even we can't see your data or even file names. But this does not actually tell me in plain terms if you encrypt my data when it's sitting o…

Your data is never stored on our servers in an unencrypted form. Moreover, the data is never stored on our servers at all. In some scenarios (when two clients are both behind aggressive firewalls, for instance) the data may be _relayed_ by our servers, but in those cases it is encrypted (end-to-end) between the devices syncing using their respective public/private keys, so we can't eavesdrop.

You can go straight peer to peer when behind less-than-totally-aggressive firewalls, using the double open trick used by voip apps like Skype, right?

Re: AeroFS (YC S10) exits private beta

#42

Post by amirmc » Wed, Apr 03, 2013, 5:40 AM UTC

rdl wrote: post #35

orangethirty wrote: post #31

Earlier quoted context omitted.

Funny bit is that YC companies always miss this. I think ya'll need a launch checklist. (:

I've actually been thinking about putting together a book/list of checklists. 1) Launch 2) Onboarding employee 3) Firing employee 3.5) Firing cofounder(s) 4) Getting hacked 5) Trolled 6) M&A offers 7) Running out of cash 8) Raising (per type of round) 9) Board meetings 10) Annual reporting etc.

Sounds like a great series of blog posts too. I'd definitely be interested as some of those topics are rarely discussed.

Re: AeroFS (YC S10) exits private beta

#43

Post by andrewflnr » Wed, Apr 03, 2013, 5:42 AM UTC

mbreese wrote: post #40

andrewflnr wrote: post #39

Earlier quoted context omitted.

I'm confused. This makes your servers sound almost entirely useless most of the time. What role do they normally play?

It sounds like they are using their servers as a relay to get around two clients that are behinds NATs.

Yes, I got that, but what else do they do?

Re: AeroFS (YC S10) exits private beta

#44

Post by orangethirty » Wed, Apr 03, 2013, 5:48 AM UTC

rdl wrote: post #35

orangethirty wrote: post #31

Earlier quoted context omitted.

Funny bit is that YC companies always miss this. I think ya'll need a launch checklist. (:

I've actually been thinking about putting together a book/list of checklists. 1) Launch 2) Onboarding employee 3) Firing employee 3.5) Firing cofounder(s) 4) Getting hacked 5) Trolled 6) M&A offers 7) Running out of cash 8) Raising (per type of round) 9) Board meetings 10) Annual reporting etc.

Well, if you are serious about this, then shoot me an email. Maybe I can assist in some way. (:

Re: AeroFS (YC S10) exits private beta

#45

Post by newman314 » Wed, Apr 03, 2013, 5:51 AM UTC

3 things.

1) I kinda feel like AeroFS has taken so long to come out that Dropbox occupies a huge chunk of mindshare. It's almost as if AerosFS will need to spend a bunch of time answering the "why should I switch" question. That said, I would love to see AeroFS succeed as I am less than keen on Dropbox less than stellar handling of security in the past as well as their general security model.

2) This leads to my second point. AeroFS, please please work with 1Password to do whatever you need to get 1Password+AeroFS working. If this is available, I'm switching right away.

3) Mobile support. Yes, please.

Re: AeroFS (YC S10) exits private beta

#46

Post by newman314 » Wed, Apr 03, 2013, 5:52 AM UTC

rdl wrote: post #2

This is awesome. AeroFS does everything I want in a file sharing system -- I can either run it entirely on my own machines on LAN and potentially VPN, or at a company on a network also not connected to the Internet, or I can use it as a direct Dropbox alternative (although it lacks some mobile clients and API support). I've been using it for ~a year or two in beta, as well as all the other alternatives. I still use D…

I'm not too keen on the fact that AeroFS runs on Java as I would prefer to run Java free systems as much as possible (Go version would be nice =) but am willing to live with it if that's the only option.

Re: AeroFS (YC S10) exits private beta

#47

Post by zarvox » Wed, Apr 03, 2013, 5:56 AM UTC

rdl wrote: post #41

zarvox wrote: post #34

Earlier quoted context omitted.

Your data is never stored on our servers in an unencrypted form. Moreover, the data is never stored on our servers at all. In some scenarios (when two clients are both behind aggressive firewalls, for instance) the data may be _relayed_ by our servers, but in those cases it is encrypted (end-to-end) between the devices syncing using their respective public/private keys, so we can't eavesdrop.

You can go straight peer to peer when behind less-than-totally-aggressive firewalls, using the double open trick used by voip apps like Skype, right?

Yes, we use NAT traversal techniques where possible on the WAN, and direct TCP connections over the LAN.

Re: AeroFS (YC S10) exits private beta

#48

Post by eps » Wed, Apr 03, 2013, 5:58 AM UTC

Any plans for Java-free implementation of the client software? It's a pretty big and an unwelcome dependency.

Re: AeroFS (YC S10) exits private beta

#49

Post by rdl » Wed, Apr 03, 2013, 6:01 AM UTC

amirmc wrote: post #42

rdl wrote: post #35

Earlier quoted context omitted.

I've actually been thinking about putting together a book/list of checklists. 1) Launch 2) Onboarding employee 3) Firing employee 3.5) Firing cofounder(s) 4) Getting hacked 5) Trolled 6) M&A offers 7) Running out of cash 8) Raising (per type of round) 9) Board meetings 10) Annual reporting etc.

Sounds like a great series of blog posts too. I'd definitely be interested as some of those topics are rarely discussed.

Yeah, I think blog + discussion, and then edit, and then turn into a book (which people can download or if they want to buy from Amazon buy, etc.) makes the most sense.

A lawyer's input would be really helpful for some areas; I'm pretty confident from an entrepreneur's perspective, and from a technical perspective, but while I generally am aware of the laws which apply to me, I'm not qualified or credentialed to give anything approaching legal advice.

It would almost make more sense to do in the Founders at Work style, where you have a domain expert work on each checklist/chapter.

Re: AeroFS (YC S10) exits private beta

#50

Post by eps » Wed, Apr 03, 2013, 6:04 AM UTC

zarvox wrote: post #34

andymoe wrote: post #33

It is not clear from the site if the data I give to AeroFS is encrypted at rest. There is a section called "End-to-end Security" that states: AeroFS uses AES-256 with 2048-bit RSA to create secure connections directly from one device to another. Because encryption is end-to-end, even we can't see your data or even file names. But this does not actually tell me in plain terms if you encrypt my data when it's sitting o…

Your data is never stored on our servers in an unencrypted form. Moreover, the data is never stored on our servers at all. In some scenarios (when two clients are both behind aggressive firewalls, for instance) the data may be _relayed_ by our servers, but in those cases it is encrypted (end-to-end) between the devices syncing using their respective public/private keys, so we can't eavesdrop.

Do you have a spec of your security model?

I really hope it's not a homebrew solution but something based off existing protocols. In either case, since the security and privacy is your primary feature, a full disclosure of hos it works inside is a must.