Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

How I encrypt my data in the cloud

robertclarke.com

Post reply on HN
Print view View original

71–80 of 100 posts

Re: How I encrypt my data in the cloud

#71

Post by judge2020 »

imiric wrote: post #43

I wouldn't trust a closed-source tool like Boxcryptor for encryption of sensitive data. Cryptomator looks interesting, though it's still a relatively new tool, and I'd be hesitant to rely on it. For my personal backups I use a combination of tar, pixz, and GnuPG. There's no fancy deduplication, and it's definitely not efficient, but it's relatively simple and I can restore individual files with ease. I run a variatio…

I use Cryptomator but it does "phone home" for version checks so I keep an old version of the installer just in case.

Re: How I encrypt my data in the cloud

#72

Post by judge2020 »

GordonS wrote: post #56
xchaotic wrote: post #31

"$4 per TB/month" so 16 X 12 = $192+tax not a insignificant amount even in a first world country and probably a deal breaker for people living in poorer countries.

4TB is a lot of personal data - $192/y for that isn't cheap , but I wouldn't call it expensive either for a first world country. And I suppose syncing masses of personal data to an archive across the world is kind of a 1st world problem.

For comparison, Google One offers 2TB for $10 a month and the next tier is 10tb for $100 a month (the only downside is having to use Google Drive)

Re: How I encrypt my data in the cloud

#73

Post by joyjoyjoy »

I found it extraordinary difficult to build your own encrypted cloud.

Options:

1. Truecrypt container. CON: Upload takes to long

2. ecryptfs CON Always had problems getting it to work. AFAIK it is not under current development anymore.

3. Run a FS in a mounted contaner (Filesystem in a FILE). Slow. Not very stable. Under no circumstance use ext4 or something like it, if you really want to try this, use ZFS to avoid data corruption

4. CryptFS. Great Idea but slow as f.. https://www.cryfs.org/comparison/

In the end I did not the cloud as a second backup for a large system (10TB) since I found no safe, fast and reliable way.

Re: How I encrypt my data in the cloud

#74

Post by C14L »

imiric wrote: post #43

I wouldn't trust a closed-source tool like Boxcryptor for encryption of sensitive data. Cryptomator looks interesting, though it's still a relatively new tool, and I'd be hesitant to rely on it. For my personal backups I use a combination of tar, pixz, and GnuPG. There's no fancy deduplication, and it's definitely not efficient, but it's relatively simple and I can restore individual files with ease. I run a variatio…

I used to do it this way too, but recently switched to `encfs` and simply sync the encrypted directories. So only modified files (with encrypted filenames and content) are sync'ed.

Re: How I encrypt my data in the cloud

#75

Post by pella »

joyjoyjoy wrote: post #73

I found it extraordinary difficult to build your own encrypted cloud. Options: 1. Truecrypt container. CON: Upload takes to long 2. ecryptfs CON Always had problems getting it to work. AFAIK it is not under current development anymore. 3. Run a FS in a mounted contaner (Filesystem in a FILE). Slow. Not very stable. Under no circumstance use ext4 or something like it, if you really want to try this, use ZFS to avoid d…

> 4. CryptFS. Great Idea but slow as

"CryFS solves all of these issues, but because of the increased security it is a bit slower. It is also a very new project and currently only available for Linux and Mac, but has experimental Windows support in the newest version. So if you don't need Windows support today, you can give it a try." https://www.cryfs.org/comparison/

Re: How I encrypt my data in the cloud

#76

Post by ValentineC »

joyjoyjoy wrote: post #73

I found it extraordinary difficult to build your own encrypted cloud. Options: 1. Truecrypt container. CON: Upload takes to long 2. ecryptfs CON Always had problems getting it to work. AFAIK it is not under current development anymore. 3. Run a FS in a mounted contaner (Filesystem in a FILE). Slow. Not very stable. Under no circumstance use ext4 or something like it, if you really want to try this, use ZFS to avoid d…

Did you consider rclone [1]?

[1] https://rclone.org/crypt/

Re: How I encrypt my data in the cloud

#79

Post by NKosmatos »

ur-whale wrote: post #62

None of the tools described in the article are open-source. Call me paranoid, but that doesn't pass my bar, both from a security pov and from a long-term recover-ability pov.

Veracrypt [0] is open source and has passed a security audit in the past (when it was forked from (Truecrypt). I use it for encrypted volumes and it has extra features for the truly “paranoid”. Combine this with Backblaze and you’ve got yourself a good secure backup for sensitive/personal data. [0] https://www.veracrypt.fr/code/

Re: How I encrypt my data in the cloud

#80

Post by hedora »

joyjoyjoy wrote: post #73

I found it extraordinary difficult to build your own encrypted cloud. Options: 1. Truecrypt container. CON: Upload takes to long 2. ecryptfs CON Always had problems getting it to work. AFAIK it is not under current development anymore. 3. Run a FS in a mounted contaner (Filesystem in a FILE). Slow. Not very stable. Under no circumstance use ext4 or something like it, if you really want to try this, use ZFS to avoid d…

I bought a synology, and used their solution.

Haven’t tried a full restore, but I occasionally browse old backups and download something as a spot check.

I would much prefer a turn key open source solution that’s commercially developed/supported by one firm (but not tied to that company’s hosting).

Maybe someone will release something under the BSL, and build a healthy company out of it.

Post reply on HN