Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Cryptic, encrypted online storage

kickstarter.com

Post reply on HN
Print view View original

11–17 of 17 posts

Re: Cryptic, encrypted online storage

#11

Post by mediocregopher »

bradleyjg wrote: post #5

From the "For our technical readers" paragraph, it's unclear what cryptography model you are going for. On the one hand you say that the private key (albeit password protected) is sent to the server after it is generated, but on the other you say that only public key and encrypted data are sent to the server. Is the model fundamentally the same as Lavabit's, which was so devastatingly critiqued a few weeks ago by Mox…

Lavabit's model involved sending/receiving cleartext data to/from the server, and you had to trust that the server-side would not store that plaintext. In our model no unencrypted data, except for the public key, is ever sent to the server. All encryption is done inside your browser.

For your second question, all resources for the site, including javascript, are served over SSL. This will prevent about 99% of MITM tampering attacks. While we can't overcome the inherent weakness in SSL, or guarantee against compromise on the server-side, we are working on a browser extension which will check the code you receive from the server against what is in the repository, so you can at least be alerted of any inconsistencies.

And since the website is all open-source, we're going to make it simple to host it yourself, if you want to be extra-sure that it's not compromised.

EDIT: By "website" I'm referring to the frontend, in-browser code

Re: Cryptic, encrypted online storage

#12

Post by stopthemadness »

mediocregopher wrote: post #2

Hey everyone! One of the Cryptic founders here. We'll be around to answer any questions anyone may have, so let us know what you think!

I'm a happy user of Tarsnap. Why should I consider this solution? Also (playing devil's advocate for a moment) what's the best reason you can give for me to just keep using Tarsnap?

Re: Cryptic, encrypted online storage

#14

Post by drchoc »

tmikaeld wrote: post #13

Two things that are not very clear: 1. The kickstarter is for an upcoming cloud version of Cryptic? 2. Parts are open source (Eclipse), but not intended for self-hosting?

Sorry about that, let me try to clear things up: Cryptic itself is a online file storage, so there is really only the cloud version of Cryptic (for now).

1. The kickstarter is to fund development and servers for the online file storage + web app.

2. Anything client side will be open sourced, and can be self-hosted. You could host the Cryptic site right now locally, and use a local version to interface with cryptic servers.

Re: Cryptic, encrypted online storage

#15

Post by mediocregopher »

stopthemadness wrote: post #12
mediocregopher wrote: post #2

Hey everyone! One of the Cryptic founders here. We'll be around to answer any questions anyone may have, so let us know what you think!

I'm a happy user of Tarsnap. Why should I consider this solution? Also (playing devil's advocate for a moment) what's the best reason you can give for me to just keep using Tarsnap?

I've never personally used tarsnap so take everything I say with a grain of salt here. But Cryptic offers a much easier experience for the average user, being that it's entirely in-browser and not cli-based. We also give users the ability to share their files with others through the browser, which I don't think is as straightforward with tarsnap.

To play the devil's advocate, if you're already a happy user of tarsnap then you (like me, in fact) are probably quite comfortable on the command-line, and may even prefer it. As of right now Cryptic doesn't have a command-line utility, although building one is definitely on our radar! But until then you may find it more comfortable. Thanks for checking us out though!

Re: Cryptic, encrypted online storage

#16

Post by tmikaeld »

drchoc wrote: post #14
tmikaeld wrote: post #13

Two things that are not very clear: 1. The kickstarter is for an upcoming cloud version of Cryptic? 2. Parts are open source (Eclipse), but not intended for self-hosting?

Sorry about that, let me try to clear things up: Cryptic itself is a online file storage, so there is really only the cloud version of Cryptic (for now). 1. The kickstarter is to fund development and servers for the online file storage + web app. 2. Anything client side will be open sourced, and can be self-hosted. You could host the Cryptic site right now locally, and use a local version to interface with cryptic se…

But the Cryptic site is always involved, right?

So the storage is always provided by you, and that is what the client pay for in GB increments?

Re: Cryptic, encrypted online storage

#17

Post by drchoc »

tmikaeld wrote: post #16
drchoc wrote: post #14

Earlier quoted context omitted.

Sorry about that, let me try to clear things up: Cryptic itself is a online file storage, so there is really only the cloud version of Cryptic (for now). 1. The kickstarter is to fund development and servers for the online file storage + web app. 2. Anything client side will be open sourced, and can be self-hosted. You could host the Cryptic site right now locally, and use a local version to interface with cryptic se…

But the Cryptic site is always involved, right? So the storage is always provided by you, and that is what the client pay for in GB increments?

Correct
Post reply on HN