PrivateStorage.io: A secure and privacy-focused cloud storage solution • Hacker News Board

Re: PrivateStorage.io: A secure and privacy-focused cloud storage solution

#31

Post by iagovar » Thu, Mar 14, 2019, 2:44 PM UTC

t0astbread wrote: post #21

iagovar wrote: post #19

Earlier quoted context omitted.

I'd still lean towards Iceland, Switzerland or Romania, although I'm still not sure if I should trust any EU country over this topics.

Why not?

https://restoreprivacy.com/5-eyes-9-eyes-14-eyes/ Mostly, but also by some of the news I see over here about parliaments trying with more or less success trying to pass laws to take down websites or force them to comply with questionable reasons.

I understand that there could be reasonable arguments behind, but I feel very uneasy about it.

Re: PrivateStorage.io: A secure and privacy-focused cloud storage solution

#32

Post by scott00 » Thu, Mar 14, 2019, 2:46 PM UTC

moviuro wrote: post #7

FWIW, I've been using syncthing [0] for some years now [1] and am very pleased. Even though my data is unavailable on the cloud from any untrusted computer (like e.g. my corporate laptop), it's synced on my "fleet". I'm not sure that PrivateStorage actually adds anything to the equation? EDIT> The Tahoe LAFS [2] model is more that you spread your data over multiple providers. NAS at home, several VPS providers, or wh…

How much data do you sync? I'm syncing 60 GB with NextCloud and it annoys me frequently: every time I log in it spends 5 minutes scanning my data, pegging at least one core of CPU and using up a lot of my I/O capacity. And of course at a pretty annoying time, since I almost always want to be actually using my machine during the first 5 minutes after logging in. And I'd really like to be syncing more data. Anyway, wondering if syncthing does better in this respect.

Re: PrivateStorage.io: A secure and privacy-focused cloud storage solution

#33

Post by lotharrr » Thu, Mar 14, 2019, 2:47 PM UTC

tchaffee wrote: post #29

Should anything truly private be stored in the cloud? I have never seen a solution that doesn't boil down to trusting someone. The claim is that the code is open source. But I don't know how I would verify that that's the actual code they are running on their servers. I also don't understand the payoff. For information that's not truly private (like your music collection) but that could possibly be data mined, then a…

The data is encrypted on your client before it leaves your computer. You're relying upon the servers to hold onto your ciphertext (i.e. availability), but not to keep it secret (confidentiality). And the client can detect changes to the ciphertext, so you aren't relying upon the servers for integrity either.

You have to trust the client code, for sure, but that's something that you're at least nominally in a position to inspect and verify. https://github.com/tahoe-lafs/tahoe-lafs

Re: PrivateStorage.io: A secure and privacy-focused cloud storage solution

#34

Post by jammygit » Thu, Mar 14, 2019, 2:53 PM UTC

StavrosK wrote: post #25

moviuro wrote: post #7

FWIW, I've been using syncthing [0] for some years now [1] and am very pleased. Even though my data is unavailable on the cloud from any untrusted computer (like e.g. my corporate laptop), it's synced on my "fleet". I'm not sure that PrivateStorage actually adds anything to the equation? EDIT> The Tahoe LAFS [2] model is more that you spread your data over multiple providers. NAS at home, several VPS providers, or wh…

Given how rock-solid Syncthing has been, I wonder how hard it would be to bolt encryption onto it so anything that some specific nodes receive is always encrypted.

Apparently syncthing uses fairly strong crypto in transit, or at least that's what I read recently

Re: PrivateStorage.io: A secure and privacy-focused cloud storage solution

#35

Post by boynamedsue » Thu, Mar 14, 2019, 2:55 PM UTC

They're calling this service S4 and not expecting to get sued into oblivion by AWS?

It's also not very creative. Says a lot about the maturity of their their thinking when there's such obvious naming similarity.

Re: PrivateStorage.io: A secure and privacy-focused cloud storage solution

#36

Post by moviuro » Thu, Mar 14, 2019, 2:57 PM UTC

jammygit wrote: post #34

StavrosK wrote: post #25

Earlier quoted context omitted.

Given how rock-solid Syncthing has been, I wonder how hard it would be to bolt encryption onto it so anything that some specific nodes receive is always encrypted.

Apparently syncthing uses fairly strong crypto in transit, or at least that's what I read recently

That's not what StavrosK is asking for.

Some syncthing nodes could host only the encrypted data, without the keys to decrypt them. This adds the benefit of having some nodes host the data, without being able to access it. Think: VPS, etc. that have very good availability track record, but some doubts about whether your hosting company can spy/might be coerced into spying.

Re: PrivateStorage.io: A secure and privacy-focused cloud storage solution

#37

Post by tyingq » Thu, Mar 14, 2019, 2:57 PM UTC

boynamedsue wrote: post #35

They're calling this service S4 and not expecting to get sued into oblivion by AWS? It's also not very creative. Says a lot about the maturity of their their thinking when there's such obvious naming similarity.

It does appear to be based on the phrase "Simple Secure Storage Service". Maybe 4S or SIV would have been better.

Re: PrivateStorage.io: A secure and privacy-focused cloud storage solution

#38

Post by StavrosK » Thu, Mar 14, 2019, 3:03 PM UTC

moviuro wrote: post #36

jammygit wrote: post #34

Earlier quoted context omitted.

Apparently syncthing uses fairly strong crypto in transit, or at least that's what I read recently

That's not what StavrosK is asking for. Some syncthing nodes could host only the encrypted data, without the keys to decrypt them. This adds the benefit of having some nodes host the data, without being able to access it. Think: VPS, etc. that have very good availability track record, but some doubts about whether your hosting company can spy/might be coerced into spying.

Exactly. If I could be sure that the VPS couldn't read or mess with my files without me knowing, I'd definitely add a SyncThing node on my VPS and have increased availability along with security without any hassle.

Re: PrivateStorage.io: A secure and privacy-focused cloud storage solution

#39

Post by vanburen » Thu, Mar 14, 2019, 3:15 PM UTC

StavrosK wrote: post #38

moviuro wrote: post #36

Earlier quoted context omitted.

That's not what StavrosK is asking for. Some syncthing nodes could host only the encrypted data, without the keys to decrypt them. This adds the benefit of having some nodes host the data, without being able to access it. Think: VPS, etc. that have very good availability track record, but some doubts about whether your hosting company can spy/might be coerced into spying.

Exactly. If I could be sure that the VPS couldn't read or mess with my files without me knowing, I'd definitely add a SyncThing node on my VPS and have increased availability along with security without any hassle.