OwnCloud Server 8.0

#1

Post by trampi » Mon, Feb 09, 2015, 12:45 PM UTC

OwnCloud Server 8.0
owncloud.org

Re: OwnCloud Server 8.0

#2

Post by scottlinux » Mon, Feb 09, 2015, 1:54 PM UTC

https://owncloud.org/eight/

Re: OwnCloud Server 8.0

#3

Post by wtbob » Mon, Feb 09, 2015, 2:16 PM UTC

OwnCloud looks pretty neat, but I do wish that it would support client-side encryption; I don't trust a machine I'm renting in a data centre any more than I do Facebook or Google. I'm aware that there (sadly) aren't standards for browser-uploaded encrypted files, sharing encrypted files efficiently and so forth, so it's hardly their fault.

Re: OwnCloud Server 8.0

#4

Post by neoeldex » Mon, Feb 09, 2015, 2:21 PM UTC

wtbob wrote: post #3

OwnCloud looks pretty neat, but I do wish that it would support client-side encryption; I don't trust a machine I'm renting in a data centre any more than I do Facebook or Google. I'm aware that there (sadly) aren't standards for browser-uploaded encrypted files, sharing encrypted files efficiently and so forth, so it's hardly their fault.

Can you even trust a machine you built yourself, running at home?

Not saying you're not right being wary, but who can you trust?

Can you trust yourself?

Re: OwnCloud Server 8.0

#5

Post by zimbatm » Mon, Feb 09, 2015, 2:34 PM UTC

Unfortunately OwnCloud is fundamentally broken because all "apps" share the same process and have to be written in PHP. The bigger the ecosystem gets, the harder it is going to be to deal with security issues. If OwnCloud wants to become a reference platform for other developers it really has to tackle sandboxing and permissions.

Re: OwnCloud Server 8.0

#6

Post by lukifer » Mon, Feb 09, 2015, 2:38 PM UTC

neoeldex wrote: post #4

wtbob wrote: post #3

OwnCloud looks pretty neat, but I do wish that it would support client-side encryption; I don't trust a machine I'm renting in a data centre any more than I do Facebook or Google. I'm aware that there (sadly) aren't standards for browser-uploaded encrypted files, sharing encrypted files efficiently and so forth, so it's hardly their fault.

Can you even trust a machine you built yourself, running at home? Not saying you're not right being wary, but who can you trust? Can you trust yourself?

Like so many things, security is a spectrum. Just because an intruder can break your window, doesn't mean you shouldn't lock your front door.

Re: OwnCloud Server 8.0

#7

Post by BetaMechazawa » Mon, Feb 09, 2015, 2:46 PM UTC

wtbob wrote: post #3

OwnCloud looks pretty neat, but I do wish that it would support client-side encryption; I don't trust a machine I'm renting in a data centre any more than I do Facebook or Google. I'm aware that there (sadly) aren't standards for browser-uploaded encrypted files, sharing encrypted files efficiently and so forth, so it's hardly their fault.

There is an encryption plugin that gets bundled with owncloud that allows you to encrypt the data stored on the server

Re: OwnCloud Server 8.0

#8

Post by UnoriginalGuy » Mon, Feb 09, 2015, 2:59 PM UTC

zimbatm wrote: post #5

Unfortunately OwnCloud is fundamentally broken because all "apps" share the same process and have to be written in PHP. The bigger the ecosystem gets, the harder it is going to be to deal with security issues. If OwnCloud wants to become a reference platform for other developers it really has to tackle sandboxing and permissions.

Just playing devil's advocate, but isn't this true with many CMSs? Most implement "users" (and or groups) either in-house or using the underlying OS, and when it is the underlying OS the CMS needs access to all of the user's files anyway to make cooperation and interoperability work, essentially placing a big bullseye on the CMS system itself.

Re: OwnCloud Server 8.0

#9

Post by drzaiusapelord » Mon, Feb 09, 2015, 3:07 PM UTC

This is great news. I've been looking for an excuse to move away from my bug-ridden Pydio install. I tried upgrading to the newest version of Pydio only to have the upgrade process completely break the site. OwnCloud just looks better managed and more stable for production.

Re: OwnCloud Server 8.0

#10

Post by drzaiusapelord » Mon, Feb 09, 2015, 3:08 PM UTC

zimbatm wrote: post #5

Unfortunately OwnCloud is fundamentally broken because all "apps" share the same process and have to be written in PHP. The bigger the ecosystem gets, the harder it is going to be to deal with security issues. If OwnCloud wants to become a reference platform for other developers it really has to tackle sandboxing and permissions.

>and have to be written in PHP.

How is this different than other HN beloved products like Drupal or pretty much any CMS? I can't think of any single one that has proper sandboxing. OwnCloud is just a type of CMS really, but instead of managing HTML, it manages all sorts of filetypes.