Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Nextcloud: Open-Source Cloud Apps

nextcloud.com

Post reply on HN
Print view View original

91–100 of 250 posts

Re: Nextcloud: Open-Source Cloud Apps

#91

Post by blendergeek »

zerof1l wrote: post #18

I've been using Nextcloud for some years now. Overall it's an ok replacement for Google Cloud. But for some time now their focus has been on developing features for business collaboration as opposed to personal & family ones. For example, their photo library is quite limited. There's Memories app for Nextcluod, but it isn't much better. I'm in the process of migrating to Immich. Nextcluod notes app on Android has bee…

Nextcloud Notes for Android works. You just can't use the rich editor. The plain editor works great.

Re: Nextcloud: Open-Source Cloud Apps

#92

Post by CodeCompost »

obnauticus wrote: post #20

I originally wanted to do this but the CVE history is a bit too colorful for something I’d want to trust as a “cloud replacement”: https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=nextcloud A common misconception IMO is that running and owning your own infrastructure is somehow more secure. To that I lol, and I’m confident that the thousands of AWS/GCP/Azure/iCloud security engineers are all doing a more thorough job…

It's written in PHP, the most insecure web language on the planet.

Re: Nextcloud: Open-Source Cloud Apps

#93

Post by BrandoElFollito »

Nextcloud is a nightmare.

First if all, it wants to do everything and does none well (or better than specialized apps)

Its internals are a shitshow - a question about getting the real IP of the calling client raised a 10 pages discussion where people said "it works" and other days "it does not". The "solution" required you to change a volatile setting within the docker container (and do it again when the container changes)

Finally the upgrade is insane. I once tried to upgrade my installation, was told that n+2 upgrades are not possible (fair enough) and ... the installer destroyed the database. What a piece of crap. Thanks god for backups.

Re: Nextcloud: Open-Source Cloud Apps

#94

Post by klaussilveira »

CodeCompost wrote: post #92
obnauticus wrote: post #20

I originally wanted to do this but the CVE history is a bit too colorful for something I’d want to trust as a “cloud replacement”: https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=nextcloud A common misconception IMO is that running and owning your own infrastructure is somehow more secure. To that I lol, and I’m confident that the thousands of AWS/GCP/Azure/iCloud security engineers are all doing a more thorough job…

It's written in PHP, the most insecure web language on the planet.

What, in your opinion, makes PHP less secure than Python or JavaScript?

Re: Nextcloud: Open-Source Cloud Apps

#95

Post by laymansterms »

bravetraveler wrote: post #43
obnauticus wrote: post #20

I originally wanted to do this but the CVE history is a bit too colorful for something I’d want to trust as a “cloud replacement”: https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=nextcloud A common misconception IMO is that running and owning your own infrastructure is somehow more secure. To that I lol, and I’m confident that the thousands of AWS/GCP/Azure/iCloud security engineers are all doing a more thorough job…

One doesn't have to expose it to malicious actors. It is most-useful that way, sure. Mine is at 10.27.0.68 . Have fun, hackers! Also, I lol at most CVEs. Butterfly farted outside, oh uh. Take the top one: In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files (between the server and client) may become world writable or world readable. This is fixed in 3.13.4. You mean to tell me a few minor po…

Yeah, one CVE is literally "You can use the MacOS variant of LD_PRELOAD on the client to hook libc calls! Oh no!!" This is a bogus CVE; any application can perform arbitrary actions when its system calls are hooked, but it requires such a strong threat model that the adversary realistically gains no ground by doing so.

("A code injection in Nextcloud Desktop Client for macOS allowed to load arbitrary code when starting the client with DYLD_INSERT_LIBRARIES set in the enviroment")

Re: Nextcloud: Open-Source Cloud Apps

#96

Post by Propelloni »

johnchristopher wrote: post #40
Propelloni wrote: post #28

Earlier quoted context omitted.

> their focus has been on developing features for business collaboration as opposed to personal & family ones For people like me, who have to contend with GDPR and NIS 2 requirements on an organizational level in Germany this actually is a god-send. MS and Google don't play nice with the local law, e.g. refusing order processing agreements, although MS has recently started to move on this topic. We replaced MS stuff…

Hi, we are evaluating at work. Could you shed some light on these questions ? Do you have one NC instance or do you federate (or plan to) ? Do you use the mail app ? Which applications do you use to replace sharepoint features ? Do you use the business version of NC ?

Hi, I'll try ;)

> Do you have one NC instance or do you federate (or plan to) ?

We actually have three instances. Currently they are running side-by-side but federation is planned, I think, starting October. Account management is still done in ADS and will stay there for now. SAML works as intended.

> Do you use the mail app ?

Yes, we use the Nextcloud Mail app without the AI features. Most people are using desktop clients, ie. Outlook, for daily work and it is important to us to keep Nextcloud Mail and Outlook in sync. Since the recent changes by MS new Outlook, it is also on the clock, but we are not there yet.

> Which applications do you use to replace sharepoint features ?

We used Sharepoint for centralized file storage, project management, and department sites and not much else. File storage is a given. For projects we moved to Jira some time ago, so little to do here. For department sites we use the Pico CMS integration.

> Do you use the business version of NC ?

Not yet. We are well below 200 FTE, so too small ;) We are interested, however, in the compliance and GDPR certification and we have already contacted their sales. But I don't know what became of it.

EDIT: formatting

Re: Nextcloud: Open-Source Cloud Apps

#98

Post by sneak »

BrandoElFollito wrote: post #93

Nextcloud is a nightmare. First if all, it wants to do everything and does none well (or better than specialized apps) Its internals are a shitshow - a question about getting the real IP of the calling client raised a 10 pages discussion where people said "it works" and other days "it does not". The "solution" required you to change a volatile setting within the docker container (and do it again when the container ch…

Nextcloud ate my data on a single user installation with no fancy settings turned on, with no upgrades attempted.

The sync client on desktop said it was fully synced. Only 200GB of 800GB was on the machine.

It’s some of the worst software I have ever used. It’s the pentagon house with the inverted roof built with the two-clawed hammer that eevee described.

Re: Nextcloud: Open-Source Cloud Apps

#99

Post by sneak »

boramalper wrote: post #15

I started using Nextcloud first to have an alternative to big-tech in case Google locks me out of my account, and then it became my daily driver. It's fast, private, and has mature clients for all major desktop and mobile platforms. Together with OnlyOffice, it's a good-enough substitute for Google Docs Editors (the office suite) for non-collaborative editing. I love self-hosting but file storage is one thing that I…

The desktop clients are anything but “mature”, and the whole point of GDocs is collaborative editing. If you don’t want to collaborate, syncthing works fine and doesn’t need a server.

Re: Nextcloud: Open-Source Cloud Apps

#100

Post by bo1024 »

kkfx wrote: post #5

Honestly I do not favor this paradigm, no matter if NextCloud, O360, SandStorm and alike: the point is that we should teach the desktop paradigm, syncing data around, not using desktops as monsters, hyper-expensive thin clients or more properly dumb terminals of a remote "mainframe". It's easy today because current IT evolution is totally skewed, derailed for commercial reasons, but that's untenable. Who think it's n…

Nextcloud can do local first, they call it desktop sync. Like Dropbox. https://docs.nextcloud.com/server/latest/user_manual/en/file...
Post reply on HN