Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

OwnCloud Server 8.0

owncloud.org

Post reply on HN
Print view View original

51–60 of 80 posts

Re: OwnCloud Server 8.0

#51

Post by biokoda »

pbhjpbhj wrote: post #26
zimbatm wrote: post #5

Unfortunately OwnCloud is fundamentally broken because all "apps" share the same process and have to be written in PHP. The bigger the ecosystem gets, the harder it is going to be to deal with security issues. If OwnCloud wants to become a reference platform for other developers it really has to tackle sandboxing and permissions.

Is there a better alternative to OwnCloud that doesn't have similar flaws? I'm not being sarcastic, it's fine to say it's broken but that doesn't really make a difference if there are still no better alternatives!?

An easy to use and powerful alternative is: http://www.emitcloud.com

Re: OwnCloud Server 8.0

#52

Post by toggle »

wtbob wrote: post #3

OwnCloud looks pretty neat, but I do wish that it would support client-side encryption; I don't trust a machine I'm renting in a data centre any more than I do Facebook or Google. I'm aware that there (sadly) aren't standards for browser-uploaded encrypted files, sharing encrypted files efficiently and so forth, so it's hardly their fault.

They've said that they don't intend to support this because the web interface has features like previewing images and editing ODF docs. So, in order for that to work, the server has to be able to read the actual file. As others have pointed out, there's a plugin for encryption at rest, but that can be decrypted by the server. Sounds like client side encryption is a no-go for the time being.

Re: OwnCloud Server 8.0

#53

Post by naiyt »

wtbob wrote: post #3

OwnCloud looks pretty neat, but I do wish that it would support client-side encryption; I don't trust a machine I'm renting in a data centre any more than I do Facebook or Google. I'm aware that there (sadly) aren't standards for browser-uploaded encrypted files, sharing encrypted files efficiently and so forth, so it's hardly their fault.

Have you tried Seafile? It supports client side encryption.

Re: OwnCloud Server 8.0

#54

Post by davidb_ »

pbhjpbhj wrote: post #26
zimbatm wrote: post #5

Unfortunately OwnCloud is fundamentally broken because all "apps" share the same process and have to be written in PHP. The bigger the ecosystem gets, the harder it is going to be to deal with security issues. If OwnCloud wants to become a reference platform for other developers it really has to tackle sandboxing and permissions.

Is there a better alternative to OwnCloud that doesn't have similar flaws? I'm not being sarcastic, it's fine to say it's broken but that doesn't really make a difference if there are still no better alternatives!?

The only feature it has is file sharing, but I quite like Seafile: http://seafile.com/en/home/

Re: OwnCloud Server 8.0

#55

Post by shmerl »

majormjr wrote: post #18

Are there any alternatives that have a better syncing mechanism? I really like ownClouds interface but I have encountered a few bugs with syncing files.

Just use any WebDAV share and sync with anything you want like rsync.

Re: OwnCloud Server 8.0

#56

Post by shmerl »

jepper wrote: post #20
majormjr wrote: post #18

Are there any alternatives that have a better syncing mechanism? I really like ownClouds interface but I have encountered a few bugs with syncing files.

Bittorent sync? Discoverability and multiple folder syncing has been a problem for me. I would be very interested in a perfect method to track and sync multiple folders on multiple computers

Too bad it's closed.

Re: OwnCloud Server 8.0

#57

Post by atoponce »

hbbio wrote: post #41
zimbatm wrote: post #5

Unfortunately OwnCloud is fundamentally broken because all "apps" share the same process and have to be written in PHP. The bigger the ecosystem gets, the harder it is going to be to deal with security issues. If OwnCloud wants to become a reference platform for other developers it really has to tackle sandboxing and permissions.

It's still a bit ahead of launch, but we are preparing an open source alternative to OwnCloud (that also includes messaging platform) that acts as an OAuth server for apps/plugins and an API and does not impose all apps to be implemented in the same language. We are using a NodeJS runtime, but the code is generated using a strongly statically typed language, Opa. Source code is not yet published, will be AGPL. Docker…

> It's still a bit ahead of launch, but we are preparing an open source alternative to OwnCloud

OwnCloud is licensed under the AGPLv3. Curious why you think it's not Open Source Software.

Re: OwnCloud Server 8.0

#58

Post by hbbio »

pbhjpbhj wrote: post #26
zimbatm wrote: post #5

Unfortunately OwnCloud is fundamentally broken because all "apps" share the same process and have to be written in PHP. The bigger the ecosystem gets, the harder it is going to be to deal with security issues. If OwnCloud wants to become a reference platform for other developers it really has to tackle sandboxing and permissions.

Is there a better alternative to OwnCloud that doesn't have similar flaws? I'm not being sarcastic, it's fine to say it's broken but that doesn't really make a difference if there are still no better alternatives!?

Shameless plug, but we use strong static typing to implement PEPS:

https://github.com/MLstate/PEPS

(will be open source AGPLv3, release this month)

Re: OwnCloud Server 8.0

#59

Post by hbbio »

atoponce wrote: post #57
hbbio wrote: post #41

Earlier quoted context omitted.

It's still a bit ahead of launch, but we are preparing an open source alternative to OwnCloud (that also includes messaging platform) that acts as an OAuth server for apps/plugins and an API and does not impose all apps to be implemented in the same language. We are using a NodeJS runtime, but the code is generated using a strongly statically typed language, Opa. Source code is not yet published, will be AGPL. Docker…

> It's still a bit ahead of launch, but we are preparing an open source alternative to OwnCloud OwnCloud is licensed under the AGPLv3. Curious why you think it's not Open Source Software.

Was not speaking about OwnCloud, but PEPS which is going to be AGPLv3 in a few days.

Re: OwnCloud Server 8.0

#60

Post by maratd »

moe wrote: post #47
maratd wrote: post #45

Earlier quoted context omitted.

> Wordpress is one of the most exploited software packages ever created. Hyperbole much? It's one of the most popular software packages installed on the web. It's not surprising it has a lot of eyes on it.

This has nothing to do with eyes. Dozens of other packages have a much larger install base than Wordpress. Wordpress has 32(!) CVE's tagged with "Exec Code" (remote code execution) alone. The last one a mere 6 months old. If you know another project that comes even remotely close to that then I'd be genuinely curious which one that would be?

> This has nothing to do with eyes.

Yeah, it does. You can write a crappy piece of software that nobody uses and because nobody has interest in it, it has no known security issues! Big deal.

I'm not saying that Wordpress has a great code-base or that there's no correlation, but that popularity is a substantial variable in that equation.

> Dozens of other packages have a much larger install base than Wordpress.

Name one web based software suite that's installed more often.

Post reply on HN