Live data from Hacker News

PrivateStorage.io: A secure and privacy-focused cloud storage solution

leastauthority.com

21–30 of 78 posts

Re: PrivateStorage.io: A secure and privacy-focused cloud storage solution

#21
post #19

Earlier quoted context omitted.

Still PIA got good standing in avoiding the data/log access requests so far for their VPN service.

I'd still lean towards Iceland, Switzerland or Romania, although I'm still not sure if I should trust any EU country over this topics.

Why not?

Re: PrivateStorage.io: A secure and privacy-focused cloud storage solution

#23
post #11
post #10

Earlier quoted context omitted.

A big thing is that Tahoe LAFS can be run on untrusted computers.

So you share your data on untrusted machines that you bet will live long enough to hold what you want to keep. Sounds risky. Do storage providers have an incentive to provide the service reliably à la filecoin? [0] [0] https://filecoin.io/

> Do storage providers have an incentive to provide the service reliably à la filecoin?

Yes, via a currency called Dollars.

Re: PrivateStorage.io: A secure and privacy-focused cloud storage solution

#24
post #5

Earlier quoted context omitted.

tarsnap's target audience is sysadmins and other UNIXy gurus. My grandma and my dad, who would benifit most from a secure sync mechanism would probably be unable to use it. Also, I'm not sure how you can use tarsnap at good cost for p2p sync. [0] https://www.tarsnap.com/

time for me to make a tarsnap gui ?? XD

There's official GUI https://github.com/Tarsnap/tarsnap-gui

Re: PrivateStorage.io: A secure and privacy-focused cloud storage solution

#25
post #7

FWIW, I've been using syncthing [0] for some years now [1] and am very pleased. Even though my data is unavailable on the cloud from any untrusted computer (like e.g. my corporate laptop), it's synced on my "fleet". I'm not sure that PrivateStorage actually adds anything to the equation? EDIT> The Tahoe LAFS [2] model is more that you spread your data over multiple providers. NAS at home, several VPS providers, or wh…

Given how rock-solid Syncthing has been, I wonder how hard it would be to bolt encryption onto it so anything that some specific nodes receive is always encrypted.

Re: PrivateStorage.io: A secure and privacy-focused cloud storage solution

#27
There are a number of alternative paths in this space if you're truly focused and willing to invest a bit, but if you care about privacy enough to seek a service like this out and just want to minimize mental overhead, this seems like a good choice.

Tahoe-LAFS makes some impressive claims like maintaining confidentiality while running on untrusted machines. I think a lot of folks now would assert that really any machine running x86 due to Intel ME and the AMD equivalent should in fact be untrusted.

I'm not in a position to criticize though, this is just from a cursory glance at the summary page, and frankly I used PIA as my own VPN provider for a number of years and had only positive experiences.

Re: PrivateStorage.io: A secure and privacy-focused cloud storage solution

#28
post #14

Based in the US apparently. I guess everyone here knows what that means. Not a great jurisdiction if you are concerned by privacy.

Least Authority is actually a German company now (although it was started in the US): https://leastauthority.com/about-us/

Re: PrivateStorage.io: A secure and privacy-focused cloud storage solution

#29
Should anything truly private be stored in the cloud? I have never seen a solution that doesn't boil down to trusting someone. The claim is that the code is open source. But I don't know how I would verify that that's the actual code they are running on their servers. I also don't understand the payoff. For information that's not truly private (like your music collection) but that could possibly be data mined, then a very basic level of privacy you get from something like Dropbox should be enough, right? What does this service offer that other cloud storage providers don't offer? For information that's truly private, why would I risk it becoming eventually available to hackers by putting it somewhere in the cloud? What am I missing?

Re: PrivateStorage.io: A secure and privacy-focused cloud storage solution

#30

There are a number of alternative paths in this space if you're truly focused and willing to invest a bit, but if you care about privacy enough to seek a service like this out and just want to minimize mental overhead, this seems like a good choice. Tahoe-LAFS makes some impressive claims like maintaining confidentiality while running on untrusted machines. I think a lot of folks now would assert that really any mach…

(author of Tahoe here, although I'm not much involved these days)

> Tahoe-LAFS makes some impressive claims like maintaining confidentiality while running on untrusted machines. I think a lot of folks now would assert that really any machine running x86 due to Intel ME and the AMD equivalent should in fact be untrusted.

To be precise, our claim is that you can use untrusted servers, since the client encrypts the data before it leaves your machine. You are, of course, entirely reliant on your own client being trustworthy. Nothing can save you if your client is compromised, whether via ME, a BIOS infection, an OS rootkit, or a boring old userspace compromise.

The Tahoe-LAFS client runs pretty well on ARM and Raspberry PIs, in case that feels better.

Post reply on HN