Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Wuala: Secure Cloud Storage

wuala.com

Post reply on HN
Print view View original

81–90 of 207 posts

Re: Wuala: Secure Cloud Storage

#81

Post by quchen »

VexXtreme wrote: post #53
Keyframe wrote: post #44

Company may be in Europe, servers might be in Europe, you might be in Europe. Nothing guarantees you that your data won't be routed through US where it can be tapped into. That's the primary issue for me with the whole PRISM scandal.

Data is encrypted client-side before being sent so I believe this is a non-issue.

It's a very non-non-issue: the client is closed source, for all we know it could do anything. Even if you listen on the data output to verify it's indeed encrypted, you still aren't able to tell whether your private key isn't transmitted alongside.

This isn't security, it's security by obscurity - in the best case, mind you.

Re: Wuala: Secure Cloud Storage

#82

Post by moystard »

greyman wrote: post #78
moystard wrote: post #19

Despite thorough researches and testing, I have never been able to find a good alternative to Dropbox in term of seamless synchronisation of my files, and accessibility across all the platforms I use. To secure my data, I just use BoxCryptor. It creates an encrypted volume within my Dropbox. It is free for non commercial use.

But how big is that volume? Shouldn't then Dropbox always upload the whole volume, even if you just made one change in one file?

The volume is as big as the data it contains.

Re: Wuala: Secure Cloud Storage

#84

Post by Keyframe »

VexXtreme wrote: post #53
Keyframe wrote: post #44

Company may be in Europe, servers might be in Europe, you might be in Europe. Nothing guarantees you that your data won't be routed through US where it can be tapped into. That's the primary issue for me with the whole PRISM scandal.

Data is encrypted client-side before being sent so I believe this is a non-issue.

Data being encrypted doesn't mean it can't be archived in that Utah data center. What capabilities they have there and what they do with it, we don't know. Substantial decryption breakthrough was hinted at in several reports, but what it is exactly - we have no idea.

Re: Wuala: Secure Cloud Storage

#85

Post by josephagoss »

sabret00the wrote: post #33

It's from Lacie, so no thank you. I bought a Lacie drive and proceeded to copy all my stuff onto it. Before I could get comfortable with it (so within the first six months of purchase) and before I backed up my stuff, the drive failed. I contacted Lacie about it and they proceeded to try and sell me a service whereby they'd recover my data for €300. That would've brought my total spend on the drive up to around £400.…

Just to help you out in future, never ever have precious/important data on one drive, even if its raid. I could not sleep if I knew all my photos and work was on just 1 drive. I get paranoid if my data is in the same physical location.

Hard drives and other storage mediums fail all the time, this is not hyperbole, these devices are not designed for 100% ever. The companies work on the assumption that if they fail they will offer a replacement within warrenty, but expecting to get data recovery for free is not reasonable.

If I was you I would spend a thousand dollars on getting the data off and never making the mistake of keeping important data on 1 storage medium again. Whenever I meet someone who has all their precious data on 1 device like this I tell them that you might as well just throw all that data away now, thats how much you care about it.

Sorry if it hurts dude, just spend the money to have the platters recovered individually and never make the mistake again.

Re: Wuala: Secure Cloud Storage

#86

Post by pgeorgi »

venomsnake wrote: post #32
gahahaha wrote: post #10

"""Do you plan to open the source code? Currently not. Opening the source code of Wuala would consume quite some time and effort, and commitment to maintain it. If you are a software engineer and would like to see how Wuala works, feel free to apply for a job at Wuala.""" ಠ_ಠ So.. an alternative, but not the solution we need.

Don't open source it. Just give read and build for personal use permission. That should be enough. I don't think that I will be able to trust secure trough obscurity solution.

Or open up the protocol, for independent client implementations. With client-side crypto, the server doesn't matter much.

Re: Wuala: Secure Cloud Storage

#88

Post by nodata »

phxql wrote: post #79
Pyramids wrote: post #25

Earlier quoted context omitted.

If you're concerned about your personal data, and not so much about targeted attacks against you, I'd say stay with Dropbox and just use EncFS. You can do this on Linux (and presumably OS X, as well) fairly easily. On Windows, there is a single-developer port of EncFS, which from what I've heard works fairly well: http://members.ferrara.linux.it/freddy77/encfs.html A quick search turns up a guide which (at first glan…

For Windows users: BoyCryptor 1.x is fully compatible with EncFS and features a GUI.

BoxCryptor is most definitely not fully compatible with EncFS - it doesn't even support the default filename encoding option that encfs uses.

Re: Wuala: Secure Cloud Storage

#89

Post by greyman »

joewee wrote: post #36

How about Dropbox + TrueCrypt + Automount? Files are decrypted in memory, files you need to share you can keep in unencrypted format.

I was thinking about this solution, and I also have a truecrypt drive (locally). But if you changed just one file in the truecrypted drive, shouldn't then Dropbox re-sync the whole encrypted drive?

Re: Wuala: Secure Cloud Storage

#90

Post by nodata »

Keyframe wrote: post #84
VexXtreme wrote: post #53

Earlier quoted context omitted.

Data is encrypted client-side before being sent so I believe this is a non-issue.

Data being encrypted doesn't mean it can't be archived in that Utah data center. What capabilities they have there and what they do with it, we don't know. Substantial decryption breakthrough was hinted at in several reports, but what it is exactly - we have no idea.

Client side encryption is enormously better than no client side encryption.
Post reply on HN