Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Why I'm saying goodbye to Dropbox and hello to SpiderOak Hive

dougbelshaw.com

Post reply on HN
Print view View original

111–120 of 120 posts

Re: Why I'm saying goodbye to Dropbox and hello to SpiderOak Hive

#111

Post by m_mueller »

rarrrrrr wrote: post #87
m_mueller wrote: post #85

What's disappointing about SpiderOak is the inability to do two-way sharing of your data - so it's not really usable in a corporate setting. Oh, you're saying it wouldn't be possible with client-side encryption? I say it should be, using a mix of symmetric and asymmetric encryption: - have all data of a repository encrypted using a symmetric key, at first known only by the repository owner. - the symmetric key gets s…

It's coming! Existing SpiderOak accounts all contain a 3072 bit RSA keypair, which is reserved for this future purpose. But it's not as simple as it seems. Things like garbage collection, and space accounting, and various race conditions between parties become the hard parts. In any case, it's on the way, and it's entirely open, built with Crypton.io, our new open source framework for building zero knowledge applicat…

Thanks, good to know. The challenges you describe are interesting, I'd love to read an article about it ;-).

Re: Why I'm saying goodbye to Dropbox and hello to SpiderOak Hive

#112

Post by epsylon »

TheEskimo wrote: post #14
devx wrote: post #6

I've seen a lot of people recommend Lastpass lately, but couldn't the government force Lastpass to create a backdoor for them to get the passwords before they are encrypted? I'd also worry about a catastrophic event of Lastpass losing those passwords somehow, and then remaining locked out of many websites. And what about Bittorent Sync with an old PC as an alternative? They even have an iOS app now.

I personally use keepass and keepassx (the alpha compatible with keepass2.x) and sync my passwords with SpiderOak. That's worked pretty well for me, and I don't actually have to trust a website with my passwords. Even if there's an insecurity in SpiderOak, they'd only get my encrypted keepass database which they'd then have to also decrypt. I definitely recommend keepass over lastpass.

> keepassx (the alpha compatible with keepass2.x)

A bit OT, but I'm guessing you're using keepassx for non-Windows OS? Is there a benefit to it compared to simply using keepass with Mono?

Re: Why I'm saying goodbye to Dropbox and hello to SpiderOak Hive

#113

Post by warcode »

jug6ernaut wrote: post #33
warcode wrote: post #4

Earlier quoted context omitted.

Once you use AeroFS you might as well use BitTorrent Sync.

Im not familiar with AeroFS, could you elaborate?

AeroFS is a filesync clone that operates without any central storage cloud, but you still need to make an account that connects to their central server.

This means they control your access to the syncing your own files.

BitTorrent Sync lets me do the same thing, but under my own control. Only thing missing there is being able to choose your own tracker.

Re: Why I'm saying goodbye to Dropbox and hello to SpiderOak Hive

#114

Post by Piskvorrr »

frenger wrote: post #106
rsync wrote: post #102

Earlier quoted context omitted.

Just sidestep the whole issue and encrypt the contents with a key only you know/possess. Then the choice is simply "who gives me the simplest offsite platform with the fewest layers of abstraction (preferably none) between my data and the underlying filesystem".[1] Switzerland is not some magic amulet that solves these problems once and for all. [1] You know who that is.

Won't syncing an encrypted file store result in a lot of sync churning each time you modify a file inside, because deltas won't work?

With a properly designed container, it should (and that's actually a feature, else you're much more vulnerable to traffic analysis). That's a tradeoff between security and convenience, IMHO.

Re: Why I'm saying goodbye to Dropbox and hello to SpiderOak Hive

#115

Post by JimmaDaRustla »

RachelF wrote: post #88
JimmaDaRustla wrote: post #57

I'm embarking on my own backup solution: For $1.38 USD/month (Ramnode OpenVZ SSD-Cached 128mb RAM VPS with 31% off for life coupon) I get 50gb. I just need to setup a synchronization/encryption schedule. I'm thinking rsync remotely to the server. Not sure on encryption yet. I'm also using the servers as development and minor hosting for myself. It's practically a free storage solution? Am I crazy?

no - where did you find the deal?

http://serverbear.com/coupons

I would just write the code here, but I'd rather you visit the wonderful site ;)

Edit: Do a search for RamNode.

Re: Why I'm saying goodbye to Dropbox and hello to SpiderOak Hive

#116

Post by JimmaDaRustla »

icebraining wrote: post #105
JimmaDaRustla wrote: post #57

I'm embarking on my own backup solution: For $1.38 USD/month (Ramnode OpenVZ SSD-Cached 128mb RAM VPS with 31% off for life coupon) I get 50gb. I just need to setup a synchronization/encryption schedule. I'm thinking rsync remotely to the server. Not sure on encryption yet. I'm also using the servers as development and minor hosting for myself. It's practically a free storage solution? Am I crazy?

I do something similar, though I use git-annex / assistant to manage the files. It can have remote data repositories using rsync with transparent encryption (using GPG keys). I also have a bigger drive at home mounted on a raspberry, which stores both the important files (as a second backup) and a lot of unimportant crap.

Thanks for the tip!

I'm hoping to look at rsync in order to do partial changes, so I could synchronize VM disks and other large files.

I don't like keeping my PC turned on to perform a sync, so I would love to setup a Raspberry pi to do the work for me, but it only has USB 2.0...

Re: Why I'm saying goodbye to Dropbox and hello to SpiderOak Hive

#117

Post by tekacs »

r00fus wrote: post #92
tekacs wrote: post #45

Earlier quoted context omitted.

Linux & OS X: encfs Windows: encfs4win Android: Cryptonite iOS: Boxcryptor Granted Boxcryptor isn't open source, but otherwise you get yourself a full encfs-compatible Dropbox stack.

IIRC, Boxcryptor isn't specific to iOS, I have it running on OSX at home, and I believe it also runs on Windows, though I've never had a reason to put it on my VM.

Sure, though the key redeeming point of the product would be that it's compatible with the (notably open-source) encfs.

Re: Why I'm saying goodbye to Dropbox and hello to SpiderOak Hive

#119

Post by fxlv »

rsync wrote: post #104
newscracker wrote: post #64

Earlier quoted context omitted.

I recently created a "petition" for SpiderOak to open source the client (and allow people to build it themselves from source) so that people can let SpiderOak know their thoughts. The petition signatures are sent to SpiderOak. It's still available at the link below if any SpiderOak user (or potential customer) wants to use it to "show the numbers" on a single site (as opposed to scattered comments): http://www.change…

You already have what you want. The source is here: http://duplicity.nongnu.org/ Actively in development, stable, ready for enterprise use.

Yeah, buggy and unstable and just hangs when you throw large quantities of small files at it.

Re: Why I'm saying goodbye to Dropbox and hello to SpiderOak Hive

#120

Post by mb_72 »

rarrrrrr wrote: post #94
mb_72 wrote: post #81

All well and good ... until Spideroak stops syncing, customer support can't explain it and you're told it will be ... get ready ... at least one month before one of their tech guys can look at the problem. I was with Spideroak for over a year before this happened to me, and I switched to competitor's product. sure, no real security, but at least it's backing up my files.

I agree our ability to scale support is a problem. Very sorry it didn't work out for you. Unfortunately on our side it's a big challenge to provide detailed troubleshooting with individual users, especially if they are not paying. We took Patio11's advise and offer a money back guarantee for paid users, but we also do try to investigate and support them much better. Since the product is zero knowledge, we can't just…

Just to clarify, I was a paid user, and am still yet to receive my refund. As I've recommended Spideroak to my clients, and several of them are also paid customers of yours, this puts in me in a difficult position.
Post reply on HN