3 ms·

One should really consider using open source tools for such things. The good thing is that those are battle-tested real well and are, usually, more secure than

by 0xmohit 10y ago

One should really consider using open source tools for such things. The good thing is that those are battle-tested real well and are, usually, more secure than the commercial offerings. An example is Vault [0]. Encryptr [1] is another alternative: it claims that "all of your data will be saved in encrypted format in our Zero Knowledge [2] cloud". [0] https://github.com/hashicorp/vault https://github.com/hashicorp/vault [1] https://spideroak.com/solutions/encryptr https://spideroak.com/solutions/encryptr [2] https://spideroak.com/features/zero-knowledge https://spideroak.com/features/zero-knowledge

ktta 10y ago
Please correct me if I'm wrong, but lastpass uses the same 'zero-knowledge' method that spideroak uses, other than spider oak uses that term everywhere including their cloud backup offering. Zero knowledge is merely the fact that spider oak only holds encrypted backups of your files and it has no way of seeing them. LastPass tells us the same thing.
- 0xmohit 10y ago
  Maybe I shouldn't have mentioned Encryptr. There are fair number of open source alternatives that allow you to store secrets in the cloud: vault: https://github.com/hashicorp/vault blackbox: https://github.com/StackExchange/blackbox git-crypt: https://www.agwa.name/projects/git-crypt/ Pass: http://www.zx2c4.com/projects/password-store/ Transcrypt: https://github.com/elasticdog/transcrypt Keyringer: https://keyringer.pw/ git-secret: https://github.com/sobolevn/git-secret
  - DonHopkins 10y ago
    The missing penultimate pre-rhotic "e" in the name is a pretty good clue that you shouldn't have mentioned Encryptr.
  - simplexion 10y ago
    Definitely should have mentioned it. Encryptr is excellent.
    - 0xmohit 10y ago
      I know. It's probably not worth attempting to convince certain people. Not only Encryptr, but even other ones [0]. Oh, and I'm not even remotely affiliated with SpiderOak. [0] https://spideroak.com/solutions https://spideroak.com/solutions

by 0xmohit 10y ago

ktta 10y ago

Please correct me if I'm wrong, but lastpass uses the same 'zero-knowledge' method that spideroak uses, other than spider oak uses that term everywhere including their cloud backup offering. Zero knowledge is merely the fact that spider oak only holds encrypted backups of your files and it has no way of seeing them. LastPass tells us the same thing.

0xmohit 10y ago
Maybe I shouldn't have mentioned Encryptr. There are fair number of open source alternatives that allow you to store secrets in the cloud: vault: https://github.com/hashicorp/vault blackbox: https://github.com/StackExchange/blackbox git-crypt: https://www.agwa.name/projects/git-crypt/ Pass: http://www.zx2c4.com/projects/password-store/ Transcrypt: https://github.com/elasticdog/transcrypt Keyringer: https://keyringer.pw/ git-secret: https://github.com/sobolevn/git-secret
- DonHopkins 10y ago
  The missing penultimate pre-rhotic "e" in the name is a pretty good clue that you shouldn't have mentioned Encryptr.
- simplexion 10y ago
  Definitely should have mentioned it. Encryptr is excellent.
  - 0xmohit 10y ago
    I know. It's probably not worth attempting to convince certain people. Not only Encryptr, but even other ones [0]. Oh, and I'm not even remotely affiliated with SpiderOak. [0] https://spideroak.com/solutions https://spideroak.com/solutions