21–30 of 45 posts
They should use Peergos [1], which satisfies all their requirements. It's built on top of ipfs, encrypts metadata as well as data, and hides file sizes and directory structure too. A directory is indistinguishable from a small file. We can also use S3 compatible object storage, including allowing direct reads and writes from the browser. Disclaimer: I'm the founder. 1. https://github.com/peergos/peergos
> Keep in mind that this system is not used in production at Cloudflare: it’s a proof-of-concept that I built
Love the idea of this. I've tried to use something similar (at least in function), called Cryptomator. However, Cryptomator would always choke on larger files or directories with thousands of items (e.g. my Google Photos gallery). Will be interested to see if this or another solution is what I'm looking for.
They should use Peergos [1], which satisfies all their requirements. It's built on top of ipfs, encrypts metadata as well as data, and hides file sizes and directory structure too. A directory is indistinguishable from a small file. We can also use S3 compatible object storage, including allowing direct reads and writes from the browser. Disclaimer: I'm the founder. 1. https://github.com/peergos/peergos
Peergos doesn't hide access patterns as far as I can tell.
The main drawbacks are that EncFS will not hide your directory structure and file sizes and also that not all of the EncFS vulnerabilities that were discovered in 2014 have been addressed with an EncFS 2.0 release.
--
² or one of its similar alternatives of course
There a couple of solutions that are fuse based and dealing with folder based encryption and gocryptfs has a page that compares them here[1]. It will be interesting to see how this project does against its competition. SiriKali[2] is a front end to a majority of these projects and it works on Linux, MACOS and windows. [1] https://nuetzlich.net/gocryptfs/comparison/ [2] https://mhogomchungu.github.io/sirikali/
For anyone thinking about playing with this, please make sure you note this line: > Keep in mind that this system is not used in production at Cloudflare: it’s a proof-of-concept that I built
Dropbox and Google could easily encrypt the files locally with your own key prior to uploading them to their servers. But of course they won't do that, because then how else will they mine your data? Also, you probably shouldn't trust them even if they did offer this anyway.
Dropbox and Google could easily encrypt the files locally with your own key prior to uploading them to their servers. But of course they won't do that, because then how else will they mine your data? Also, you probably shouldn't trust them even if they did offer this anyway.
Also (and more charitably), I'm pretty sure at least Dropbox deduplicates files between customers.
Love the idea of this. I've tried to use something similar (at least in function), called Cryptomator. However, Cryptomator would always choke on larger files or directories with thousands of items (e.g. my Google Photos gallery). Will be interested to see if this or another solution is what I'm looking for.