5 ms·
Lastly, people use Facebook at work and at home, and they log onto it from their friend's houses, their phones, etc. If it's all on my "node" at home, do I have
by philk 16y ago
Lastly, people use Facebook at work and at home, and they log onto it from their friend's houses, their phones, etc. If it's all on my "node" at home, do I have to leave my stuff running all the time? That's not very convenient or green. And I don't want my bandwidth at home being eaten up every time my friends want to look at my vacation photos.
What you really want is a central repository where your encrypted data can be uploaded to and only decrypted by those you choose (not the host itself).
- ErrantX 16y agoKinda like... a Tarsnap where you can share a "readonly" key with some people.
- dpcan 16y agoMaybe. This is how backup services like Carbonite work. I can create a key that they don't have, and if I lose it, I'm locked out, bye bye data. Otherwise, where there's a key, there's a master key, and we're right back where we started.
- newobj 16y agoAnd what happens when I want to remove one of my 200 friends? Conversely, what happens when I want to add a new friend and give them access to my 200 photos? The only answer I can imagine involves a (#friends X #resources) duplication of storage, processing, etc.
- eli 16y agoHonestly, I think I would be fine with a unencrypted central repository that just isn't evil. Something with a very clear policy on what data is stored and what is done with. I assure you the mechanics of how the data is stored is not of interest to 99% of people. Nobody really understands encryption anyway. Or is this site exclusively for geeks?
- swernli 16y agoWhether or not people understand encryption doesn't change how well it projects them. The difference between "encrypted" and "unencrypted and not evil" is like the difference between a car with airbags and a car that has a little sticker on the dash that says "Try not to crash." Obviously, no security is perfect, and given sufficiently evil central repository you'd still end up a situation of mistrust. But rather than take a chance with my private information simply because the people holding it tell me they aren't evil, I'll take responsibility for my own data and do my best as a user to make the right choices about how to treat that which I desire to keep private. If that means being picky about what I share/post, that's fine. If that means I need to run my own host and control access myself, well that's the burden I can choose to take to give me the peace of mind I'm looking for.
- Steltek 16y agoAt one time, Facebook's ToS were quite friendly and unintimidating. Encryption means that a repository that "isn't evil" today, stays that way forever. Additionally, if done right, the users do not need to know a whiff about encryption. I'll point to "https:// https:// as a more successful example.