3 ms·
Because they don't have your data, they have your encrypted data and no key. Last week I emailed the Information Commissioner's Office in the United Kingdom ht
by mavhc 10y ago
Because they don't have your data, they have your encrypted data and no key.
Last week I emailed the Information Commissioner's Office in the United Kingdom https://ico.org.uk/ https://ico.org.uk/ about whether, in their view, storing encrypted backups in another country, when the key never leaves the UK, counts as moving personal data outside the country, sadly they said yes, I don't really have faith they understood the maths though.
- msh 10y agoMaybe they understand the theory but have no means of verifying the implementation, while its easier to verify the location of data.
- mavhc 10y agoThey don't really verify things anyway, they wait for people to inform them of issues. Encryption can be broken, but, one assumes: a) that your backups aren't likely to be stolen, b) that no one cares enough and c) by the time they are, the people whose information you stored are dead If you logged in you provided the key: NOTE: Logging in via the SpiderOak website does temporarily allow SpiderOak employees access to your password. Due to this exposure, we discourage users from entering your password online if they wish to fully retain our Zero-Knowledge privacy.
- icebraining 10y agoEncryption can be broken, especially in the long run.
- warrenmiller 10y agoIf they have no key how come I can login and download files from the web UI without providing my key?