Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

AeroFS (YC S10) exits private beta

blog.aerofs.com

Post reply on HN
Print view View original

71–80 of 94 posts

Re: AeroFS (YC S10) exits private beta

#71

Post by rdl »

zarvox wrote: post #60
abcd_f wrote: post #58

Earlier quoted context omitted.

Do you use certificate pinning on the clients? I.e. once a client sees peer's cert for the first time, it should remember it and warn if it ever changed afterwards.

Cert pinning only makes sense if you happen to trust multiple CAs, but want to stick to the cert issued by one particular one. We only trust one CA, and each issued cert is bound to a user and device id, so this is a non-issue. :)

Arguably you should also public key pin the key for https://www.aerofs.com/ anyway, just to get initial protection. IMO you're important enough and clueful enough to get this from Chrome, but I'm not agl.

Re: AeroFS (YC S10) exits private beta

#72

Post by rdl »

abcd_f wrote: post #69
zarvox wrote: post #60

Earlier quoted context omitted.

Cert pinning only makes sense if you happen to trust multiple CAs, but want to stick to the cert issued by one particular one. We only trust one CA, and each issued cert is bound to a user and device id, so this is a non-issue. :)

No, no, no. It has nothing to do with that. Cert pinning is used to mitigate man-in-the-middle attacks whereby an attacker somehow obtains a valid certificate for peer's ID further down the road. If the certificate is not pinned, then the client will swallow a new cert without a peep, because it tracks back to a trusted CA. Cert pinning is an equivalent of ~/.ssh/known_hosts. It allows me to pin specific public key t…

What would make just as much (or more) sense for most of their enterprise deployments would be to let the enterprise's own PKI take over. A lot of businesses would probably want to be able to silently update keys (although I can see the value in pinning/local cache with notification on change). They may do that as part of the "custom LDAP/AD" tier.

Re: AeroFS (YC S10) exits private beta

#73

Post by rdl »

newman314 wrote: post #45

3 things. 1) I kinda feel like AeroFS has taken so long to come out that Dropbox occupies a huge chunk of mindshare. It's almost as if AerosFS will need to spend a bunch of time answering the "why should I switch" question. That said, I would love to see AeroFS succeed as I am less than keen on Dropbox less than stellar handling of security in the past as well as their general security model. 2) This leads to my seco…

OTOH, most businesses don't yet use Dropbox (much) today. If AeroFS's market is the enterprise, they're competing with Windows file sharing/SMB/Samba, NFS, etc., not so much with Dropbox. It's a bit skewed in Silicon Valley and in the consumer market.

Re: AeroFS (YC S10) exits private beta

#74

Post by kayoone »

When i just have 2 clients syncing with each other and one of them is not permanently available to sync, this isnt going to work very good right ?

So id need some central always-on server to sync my stuff to, to habe it all synced and secure all the time.

Re: AeroFS (YC S10) exits private beta

#76

Post by drdaeman »

afics wrote: post #75

How does it compare to Tahoe-LAFS¹? ¹ https://tahoe-lafs.org

Two different things.

Tahoe-LAFS is a secure storage system (protocol and free software implementation). It does not handle synchronization between devices (only RAID-like replication).

AeroFS is a sync service (proprietary software only). It does not provide any storage, but only syncs data between your devices.

Re: AeroFS (YC S10) exits private beta

#77

Post by yason »

End-to-end encrypted private file sharing darknet that basically appears as a regular folder and doesn't share anything outside your friends. Given some critical mass, that'd just be way too user-friendly for sharing files with $FRIENDS.

Now I'd like to know what the MAFIAA can do about that? This is where it's headed anyway, what the world needs is a mass-market darknet software and this sort of thing just might be it, given Dropbox's popularity.

Re: AeroFS (YC S10) exits private beta

#78

Post by brass9 »

yurisagalov wrote: post #53
newman314 wrote: post #46

Earlier quoted context omitted.

I'm not too keen on the fact that AeroFS runs on Java as I would prefer to run Java free systems as much as possible (Go version would be nice =) but am willing to live with it if that's the only option.

We're working on it (a Java-free system, not a Go version, sorry ;) See my response here: https://news.ycombinator.com/item?id=5484566

That's still considered Java - even if you're bundling the runtime dependencies within the app...

Re: AeroFS (YC S10) exits private beta

#79

Post by k2enemy »

rdl wrote: post #2

This is awesome. AeroFS does everything I want in a file sharing system -- I can either run it entirely on my own machines on LAN and potentially VPN, or at a company on a network also not connected to the Internet, or I can use it as a direct Dropbox alternative (although it lacks some mobile clients and API support). I've been using it for ~a year or two in beta, as well as all the other alternatives. I still use D…

I was also a long-time user of AeroFS, but SyncApp from BitTorrent has worked much better for me so I've switched over. I would recommend giving it a try.

Re: AeroFS (YC S10) exits private beta

#80

Post by urza »

newman314 wrote: post #46
rdl wrote: post #2

This is awesome. AeroFS does everything I want in a file sharing system -- I can either run it entirely on my own machines on LAN and potentially VPN, or at a company on a network also not connected to the Internet, or I can use it as a direct Dropbox alternative (although it lacks some mobile clients and API support). I've been using it for ~a year or two in beta, as well as all the other alternatives. I still use D…

I'm not too keen on the fact that AeroFS runs on Java as I would prefer to run Java free systems as much as possible (Go version would be nice =) but am willing to live with it if that's the only option.

Exactly, I removed java from all my computers about week ago. And since I am having my personal debian server, I installed ownCloud 5 on it for filesyncing.. and I am happy so far.. the clients are in C++
Post reply on HN