9 ms·
> But some might say that because it's not open source you can't trust them. And should it not be the case? Theoretically. As for the reasoning why they do no
by balladeer 10y ago
> But some might say that because it's not open source you can't trust them.
And should it not be the case? Theoretically.
As for the reasoning why they do not have incentive to lie to you goes same for anyone and pretty much anything where a wrongdoing takes place that shouldn't have happened in the first place. It could be anything. If we go for examples it will be stretching it just too far.
The middle ground can be - an easy backup/sync/mail service that does the heavy lifting - the transport work and we encrypt decrypt on the client side. For example, we can't have a transportation company if all we have to do is send a few packets every month across the company or globe. But we can have an unbreakable lock/safe/package in which package the stuff and the receiver is the only person how to open the stuff. I have never really been good at analogies but I hope you get the drift.
If only they could write an easy app that uses the service APIs and code for that app is open source and all it does is encryption decryption (generally speaking) on the client machine. Something BackBlaze and CrashPlan claim to do (they are closed source btw) and so does Tarsnap (haven't used it - too complex and pricey for my use case; and not sure if it's open source).
- cperciva 10y agoTarsnap (haven't used it - too complex and pricey for my use case; and not sure if it's open source). FWIW, Tarsnap is not under an open source license, but you do get the client source code (and you're encouraged to audit it before compiling).