What revision of the seafile components was used as base?
Show HN: End-to-End Encrypted Cloud Storage. All Open Source
21–30 of 43 posts
Re: Show HN: End-to-End Encrypted Cloud Storage. All Open Source
#22"All of our code is open source and can be reviewed by anyone. This guarantees maximum security." Can be reviewed doesn't mean has been reviewed. Nor does it imply any quality of review, or the quality of the reviewers itself. And the knife cuts on two sides, though only one side is mentioned, the one side that should attract users. Not the side, that every evil minded person can look through the source code, abuse i…
> Can be reviewed doesn't mean has been reviewed. Well, you can't blame them if nobody bothers to review their code. > Not the side, that every evil minded person can look through the source code, abuse it, before we were able to counter/fix etc it. The same can be said of any other Free Software/Open source project. the Linux kernel and Apache are prime examples.
Can't blame them for that indeed. But the fact this is 'how' they guarantee security. Perhaps after years of development, widely usage and actual reviews :-)
And yes this is a valid question whenever somebody considers to use OSS (or for prop. software, how likely chance will be an exploit will be found without source code at hand, and/ or how big of a hole it burns in your budget & wallet).
Re: Show HN: End-to-End Encrypted Cloud Storage. All Open Source
#23Earlier quoted context omitted.
Why would you need to be sure of that?
Because they can say "hey look at our code here" when in fact they're running something else entirely.
But that does not matter if you trust your client and everything gets encrypted locally. That's the entire point of client-side encryption, not having to trust the server. Just review and then compile the client. And just self-hosting the server will not make you any saver because the client may be rogue and send your data to anyone.
Re: Show HN: End-to-End Encrypted Cloud Storage. All Open Source
#24The lack of positive, constructive feedback in this HN comments thread worries me. Come on people!
Re: Show HN: End-to-End Encrypted Cloud Storage. All Open Source
#25This is awesome. End-to-end encryption is the natural solution to the problem of universal surveillance as well as more mundane issues, like companies losing data and servers getting hacked. I think it's very elegant that one can build useful services with untrusted servers. The algorithms for end-to-end encryption are there, but usability of actual implementations has been pretty terrible so far. For example, compar…
> End-to-end encryption is the natural solution to the problem of universal surveillance
Well, it's one small step at least. Surveillance can learn very large amounts from meta-data, file types and sizes, access and upload times, it doesn't prevent them from hacking into endpoints (noted as a popular tactic of the NSA), it doesn't fix the problem of NSL/financial/legal(CALEA etc) leverage to backdoor the systems or from insider attacks (look at what happened to Skype's E2E), nor does it account for compromised cryptographic standards (which is MUCH more complicated than which symmetric algorithm you pick to encrypt data).
> I'll treat it as a untrusted demo until it's had more test mileage and outside code review.
:D
Should be standard for crypto products. Glad to see it here.
Re: Show HN: End-to-End Encrypted Cloud Storage. All Open Source
#26Interesting project, but I'm rather wary that the claimed security could be attacked in a similar manner to Hushmail: http://www.wired.com/2007/11/encrypted-e-mai/
Re: Show HN: End-to-End Encrypted Cloud Storage. All Open Source
#27Typo on the main page: "At disk24 we believe in privacy."
Thanks. Fixed.
May I suggest "At disk24 we believe in liberty"?
I know it's more heavy handed, but it falls in like with the Appelbaum quote "What we used to call liberty and freedom we now call privacy... and in the same breath we will say that privacy is dead."
Re: Show HN: End-to-End Encrypted Cloud Storage. All Open Source
#28Nice!
Since your imprint states you have your offices in Germany, I presume you are also hosting in Germany? What providers do you use?
Re: Show HN: End-to-End Encrypted Cloud Storage. All Open Source
#29What revision of the seafile components was used as base?
https://github.com/disk42com/disk42 == https://github.com/haiwen/seafile/releases/tag/v3.1.7 (almost 2 months out of date)
https://github.com/disk42com/ccnet == https://github.com/haiwen/ccnet/tree/dd3f1fab491dfcec8b8ca30... (3 months out of date)
Looking at seafile-client at the moment, this reeks of an unmaintained and dishonest fork. They did not even bother merging encryption related changes from upstream. Stay away.
Code is sometimes commented out and sometimes marked with a "code42" comment.
Re: Show HN: End-to-End Encrypted Cloud Storage. All Open Source
#30The lack of positive, constructive feedback in this HN comments thread worries me. Come on people!
This is just a hosted seafile installation from an out-dated fork. Negative feedback is what this should get by all means, if only for being dishonest and evasive about the software used.