Live data from Hacker News

Wuala: Secure Cloud Storage

Post reply on HN

Print view View original

191–200 of 207 posts

Re: Wuala: Secure Cloud Storage

#191

Post by tripzilch » Mon, Jun 10, 2013, 9:10 PM UTC

mike-cardwell wrote: post #186

pasbesoin wrote: post #161

Earlier quoted context omitted.

Who's to say they can't be convinced to push a one-off update to your account/machine. Perhaps a transitory one, to help cover their tracks? The underlying problem is that you're trusting closed client software from a third-party. Once that is running on your system, arguably it's game over as far as what Dropbox or its like can and can't do to you. (If you trust them, ok. But when documents state that "they're next"…

https://grepular.com/Protecting_Your_GNU_Linux_System_from_D...

Very interesting and useful, not just for securing DropBox either.

FYI this article suggests to use encfs for an encrypted folder in your dropbox, this comment https://news.ycombinator.com/item?id=5855465 suggests that this might not be a wise choice, so you might want to (re)consider that part.

Re: Wuala: Secure Cloud Storage

#192

Post by solnyshok » Mon, Jun 10, 2013, 9:33 PM UTC

pacomerh wrote: post #188

solnyshok wrote: post #39

I used Wuala for couple of years, when it was free and allowed earning a much larger quota by sharing own drive space to host other user's data. I used it to keep around 100GB of my personal data. Used to be good while it lasted. Encrypted, distributed, redundant. Then LaCie bought it and turned it into a Dropbox clone. Now I use AeroFS, also tried TorrentSync. Both a roughly equal. I just felt lazy changing from alr…

It's still free, I don't pay a dime.

how much storage you've got there?

Re: Wuala: Secure Cloud Storage

#193

Post by lucian1900 » Mon, Jun 10, 2013, 10:13 PM UTC

simgidacav wrote: post #190

lucian1900 wrote: post #112

Earlier quoted context omitted.

Dropbox's client is not open source by any stretch of the imagination.

https://www.dropbox.com/help/247/en On the first I was like "ops, said bullshit"... but actually it seems like it's GPL.

That is only nautilus-dropbox (file manager integration) and the installer. Dropbox itself is distributed as a binary blob.

Re: Wuala: Secure Cloud Storage

#194

Post by lucian1900 » Mon, Jun 10, 2013, 10:13 PM UTC

simgidacav wrote: post #190

lucian1900 wrote: post #112

Earlier quoted context omitted.

Dropbox's client is not open source by any stretch of the imagination.

https://www.dropbox.com/help/247/en On the first I was like "ops, said bullshit"... but actually it seems like it's GPL.

That is only nautilus-dropbox (file manager integration) and the installer. Dropbox itself is distributed as a binary blob.

Re: Wuala: Secure Cloud Storage

#195

Post by lucian1900 » Mon, Jun 10, 2013, 10:13 PM UTC

simgidacav wrote: post #190

lucian1900 wrote: post #112

Earlier quoted context omitted.

Dropbox's client is not open source by any stretch of the imagination.

https://www.dropbox.com/help/247/en On the first I was like "ops, said bullshit"... but actually it seems like it's GPL.

That is only nautilus-dropbox (file manager integration) and the installer. Dropbox itself is distributed as a binary blob.

Re: Wuala: Secure Cloud Storage

#196

Post by lucian1900 » Mon, Jun 10, 2013, 10:13 PM UTC

simgidacav wrote: post #190

lucian1900 wrote: post #112

Earlier quoted context omitted.

Dropbox's client is not open source by any stretch of the imagination.

https://www.dropbox.com/help/247/en On the first I was like "ops, said bullshit"... but actually it seems like it's GPL.

That is only nautilus-dropbox (file manager integration) and the installer. Dropbox itself is distributed as a binary blob.

Re: Wuala: Secure Cloud Storage

#197

Post by lucian1900 » Mon, Jun 10, 2013, 10:19 PM UTC

simgidacav wrote: post #190

lucian1900 wrote: post #112

Earlier quoted context omitted.

Dropbox's client is not open source by any stretch of the imagination.

https://www.dropbox.com/help/247/en On the first I was like "ops, said bullshit"... but actually it seems like it's GPL.

That is only nautilus-dropbox (file manager integration) and the installer. Dropbox itself is distributed as a binary blob.

Re: Wuala: Secure Cloud Storage

#198

Post by lucian1900 » Mon, Jun 10, 2013, 10:19 PM UTC

simgidacav wrote: post #190

lucian1900 wrote: post #112

Earlier quoted context omitted.

Dropbox's client is not open source by any stretch of the imagination.

https://www.dropbox.com/help/247/en On the first I was like "ops, said bullshit"... but actually it seems like it's GPL.

That is only nautilus-dropbox (file manager integration) and the installer. Dropbox itself is distributed as a binary blob.

Re: Wuala: Secure Cloud Storage

#199

Post by foobarqux » Mon, Jun 10, 2013, 10:37 PM UTC

drdaeman wrote: post #122

claudius wrote: post #114

Earlier quoted context omitted.

Nobody sane wants software to auto-update, especially not security-relevant software. This is in particular true if you reviewed the source code of the software at one point in time. Furthermore, for the software to be able to even auto-update, it would have to be able to change its own binary. I don’t know how this particular piece of software works, but it is possible to run FUSE ‘drivers’ as a user on Linux, with…

From http://www.wuala.com/en/download/linux : > The package installs Wuala and registers our repository for further updates. This is even more harmful that it sounds, as someone who has repo access (be it some evil staff member or, more possibly, inturder) may push not only malicious Wuala build, but any package with higher version number than in other repos (say, a linux-image-999.999 with a bundled rootkit) and if…

Use apt pinning

Re: Wuala: Secure Cloud Storage

#200

Post by fakeer » Tue, Jun 11, 2013, 3:57 AM UTC

a3_nm wrote: post #154

kijin wrote: post #109

Seriously? Wuala is a service run by LaCie. LaCie is owned by Seagate, an American corporation. It doesn't matter where the servers are, because all the important decisions will be made in Cupertino, California. http://www.lacie.com/us/company/news/news.htm?id=10722 Now, client-side encryption is a much more interesting aspect of their service, but is it worth the trouble if Wuala's clunky client takes 100 times long…

> is it worth the trouble if Wuala's clunky client takes 100 times longer than Dropbox to sync a file between two devices Is this some general FUD about encryption being slow, or an actual measurement? Maybe all client-side encrypted solutions happen to be crappily implemented, but I don't think that client-side encryption would necessarily lead to something noticeably slower.

I wouldn't go into technicalities because I can't - mostly because it's not my area of expertise and I've never looked into it deeply or maybe not even from the surface other than a user's perspective. The end user.

Wuala is seriously slow and clunky piece of software. Period.

Post reply on HN