41–50 of 120 posts
I've racked up 7.9GB on my free Dropbox account. Until there is an alternative that offers more for free, I probably wouldn't consider switching. However, I'm encouraged by the amount of cloud hosting services emphasizing privacy, maybe at some point dropbox will follow suit.
SpiderOak user here. Just remember to not use the Web UI: if you do so, your plaintext password is sent to the servers, because decryption happens on the servers. This is mentioned in their FAQ. Unless things have changed since the last time I checked.
Chicago? Last time I checked, that city is within the jurisdiction of the United States and not immune to national security gag letters. No thanks. Swiss based Wuala.com is a much better solution.
While I trust the Swiss a lot more than I do anything in or from the US, I certainly wouldn't bet my life on it.
The links below are what a quick search yielded. Not much time to dig deeper at the moment.
[1] http://web.archive.org/web/20080611115027/http://www.treas.g...
[2] http://web.archive.org/web/20060717203642/http://useu.usmiss...
Earlier quoted context omitted.
I was typing another comment just as you posted this but making essentially the same point. If you are using Linux, FreeBSD or Mac OSX you can use local open source encryption before your data touches the sync program (or even the online backup servers) with EncFS.[1] I'm using it with Dropbox and it is solid, easy to use and set up, and does efficient file-based encryption (so no re-uploading folders just because yo…
Thanks for the info, but I said ubiquitous exactly because I need something that "just works" on each one of Windows, Linux, Android and iOS. And I'm not aware of any open source solution there, hence have to use Wuala.
Windows: encfs4win
Android: Cryptonite
iOS: Boxcryptor
Granted Boxcryptor isn't open source, but otherwise you get yourself a full encfs-compatible Dropbox stack.
Earlier quoted context omitted.
If you are sufficiently paranoid about having to destroy the notebook, tissue paper and water soluble ink go a long way to making it easier. I made about a dozen for a murder mystery party about two years ago and still have one lying around somewhere. A small waterproof bag should make sure it isn't inadvertantly damaged in the rain.
The more dramatic solution is flash paper, which destroys all conceivable evidence. Don't fly with it. http://en.wikipedia.org/wiki/Nitrocellulose
SpiderOak user here. Just remember to not use the Web UI: if you do so, your plaintext password is sent to the servers, because decryption happens on the servers. This is mentioned in their FAQ. Unless things have changed since the last time I checked.
They don't utilise https? Please tell me that isn't true.
Chicago? Last time I checked, that city is within the jurisdiction of the United States and not immune to national security gag letters. No thanks. Swiss based Wuala.com is a much better solution.
Chicago? Last time I checked, that city is within the jurisdiction of the United States and not immune to national security gag letters. No thanks. Swiss based Wuala.com is a much better solution.
Valid point. Conversely though (I'm probably over simplifying here) wouldn't this require some sort of secret instructions in the encryption software to send the user's key to HQ? Wouldn't said transmission be detectable by logging traffic from the encryption program? Granted many won't do that but it would only take one person sniffing packets on their machine to reveal it.
That is a lot of regular ping message, directory listing, software update that can be overlooked in that period.
As another commenter pointed out that you voluntarily give the password if you use the web UI. Probably the same if you use a mobile client. So there is build-in room for honest mistake in their service definition.
So basically, you still need to trust a third party, and looking at the recent news, they are really out there to get you.
Another thing that nobody is talking about and at the heart of internet. What about all those SSL certificates ?
Chicago? Last time I checked, that city is within the jurisdiction of the United States and not immune to national security gag letters. No thanks. Swiss based Wuala.com is a much better solution.
Isn't switching from one closed source backup system to another closed source system overlooking the elephant in the room? These companies are legally required to rat you out when the government comes knocking (some even doing so without demanding a valid warrant, and profiting from LEO requests). SpiderOak has been saying they "expect to make the SpiderOak client code open source in the not-distant future" [1] for y…
While open-sourcing the desktop client isn't going as fast as we'd like, I'd like to point out that practically all current and future projects are open source on our GitHub (https://github.com/SpiderOak/), including our next-gen encryption system Crypton (which will eventually replace the data structures in the desktop client ANYWAY)