Linked by Thom Holwerda on Tue 24th Apr 2012 17:39 UTC
Thread beginning with comment 515566
To read all comments associated with this story, please click here.
To read all comments associated with this story, please click here.
+1 for SpiderOak.
They seem to be trustworthy, their blog entries are interesting and give off a sense of honesty... and unless they're lying through their teeth, the zero-knowledge client-side encryption is exactly what you want.
Yes, you have more control on a home server, but how much redundancy does that offer you?
even if the US laws where more lenient, even if Google was doing it fully as a non-profit, in fact even if you could find a safe country where to store your files with an organisation with high moral standards, it doesn't matter: never trust anybody to take care of your own security.
This. Even if your data is on a server hosted by a company you trust, in a country you trust, there's no guarantee that server isn't going to get hacked. In other words, whether your sensitive data is on your local hard drive or on a server somewhere else, it BETTER be encrypted and/or at least password protected. In that case, it doesn't really matter WHERE you store it.
As for setting up your own storage solution, that's all fine and good, until a fire or tornado comes along and renders your storage solution useless. As for me, there is some data that I absolutely cannot afford to lose, so I want to have at least a backup copy 'off site' somewhere. I would NEVER store my primary copy in the cloud though.
In regard to my data and privacy, I don't think that either Google or the government would be interested in things such as my fitness routines, grocery lists, code snippets, etc. The only thing remotely 'juicy' is my journal, which is password protected. And even if it were decrypted by someone, and they were able to figure out which app they needed to read it, there's not anything in there that's going to get me fired, or in trouble with the law.
Basically, my point is this... if data that you absolutely need to keep secret is not secure enough so you could put it on a server owned by your worst enemy, it's probably not secure enough.
RE[2]: Comment by Radio - quote of the week
by jabbotts on Wed 25th Apr 2012 15:53
in reply to "RE: Comment by Radio"





Member since:
2009-06-20
Otherwise, an excellent alternative would be SpiderOak, the only one to do privacy right: all is encoded on your side.
https://spideroak.com/
And they like open-source: https://spideroak.com/code
Otherwise, I think you get it slightly wrong, Thom: professional paranoids like John Young, the guy who runs http://cryptome.org/, or security experts like Bruce Schneier ( http://www.schneier.com/ ) would tell you that even if the US laws where more lenient, even if Google was doing it fully as a non-profit, in fact even if you could find a safe country where to store your files with an organisation with high moral standards, it doesn't matter: never trust anybody to take care of your own security.
So yeah, you almost made the point by telling people to host their files themselves. But I will gladly use Google Drive, and you should too. They are just a convenient place to put your encrypted sensitive files.