4 ms·
At a glance: SpiderOak offers encrypted backups. This is a good thing. It doesn't specify how it's stored on their end (presumably because it doesn't matter to
by CiPHPerCoder 11y ago
At a glance:
SpiderOak offers encrypted backups. This is a good thing. It doesn't specify how it's stored on their end (presumably because it doesn't matter to the end user). So that's an unknown.
Bytejail offers encrypted anonymous backups (via Tor Hidden Service) and uses a TahoeLAFS backend. My understanding of TahoeLAFS is that it's excellent. So if you're security-conscious, Bytejail would seem like a better choice.
(I'm not familiar enough with SpiderOak to comment on their offering in detail; I can only really go off the page you linked.)
- fweespee_ch 11y agoFyi: https://spideroak.com/manual/zero-knowledge-explained/ https://spideroak.com/manual/zero-knowledge-explained/ Its local encryption then copies the resulting blob to SpiderOak. Lose your password, lose your ability to decrypt as you need it to decrypt locally.
- CiPHPerCoder 11y agoYeah, I know. Both services offer that. Bytejail uses X25519 + Xsalsa20Poly1305. SpiderOak uses RSA-2048 + AES-256. (Is it AES-256-CTR + HMAC-SHA2 or is it AES-256-GCM? That page doesn't specify.) Bytejail uses scrypt. SpiderOak uses PBKDF2-SHA256 with 16384 iterations. My earlier comment was saying: Bytejail uses TahoeLAFS on the backend after receiving encrypted blobs. SpiderOak uses ________? Again, to clarify: This isn't a crticism of SpiderOak. I just literally don't know what they are doing from the pages people have linked to in this thread.
- Freaky 11y agohttps://spideroak.com/features/private-by-design https://spideroak.com/features/private-by-design - "SpiderOak uses AES256 in CFB mode and HMAC-SHA256."
- CiPHPerCoder 11y agoThanks. Not sure how I feel about CFB but that did answer one of the two big questions the other page didn't. :)