5 ms·

Remember when encryption just didn't work on subfolders, but they kept telling everyone it did? https://github.com/nextcloud/desktop/issues/816 https://github.c

Remember when encryption just didn't work on subfolders, but they kept telling everyone it did? https://github.com/nextcloud/desktop/issues/816 https://github.com/nextcloud/desktop/issues/816 Unless they've really cleaned up their act, nextcloud just isn't suitable for real data. I would pay _so_ much money for a correctly functioning WebDAV server, maintained by responsible professionals. EDIT: looks like they have _not_ cleaned up their act whatsoever: https://github.com/nextcloud/end_to_end_encryption/issues/382 https://github.com/nextcloud/end_to_end_encryption/issues/38...

actionfromafar 4y ago
What do you use a WebDAV server for? Trying to understand if or how I should add it to my offer. :)
jamesponddotco 4y ago
I wonder how ownCloud is doing these days, especially since it looks like they changed everything to Go.
- fffrantz 4y ago
  Me too! I also wonder about migration from Nextcloud. I might try to migrate a staging Nextcloud instance if I get around to it.
- tiberious726 4y ago
  I didn't realize this was finally ready! Thanks! Definitely going to check it out.
teddyh 4y ago
> EDIT: looks like they have _not_ cleaned up their act whatsoever: That link states that is is fixed now, though?
- crtasm 4y ago
  No response from contributors. OP there says: > But after updating ... now it works, but I don't now why and I'm not sure why and if it will continue working properly. I cannot trust such a system.
  - teddyh 4y ago
    That could be simply explained as being justification of their decision after the fact. OP may have already decided to stop using the software, so even when they were informed that the software was fixed, they couldn’t back down. It’s a perfectly normal reaction, but not necessarily a rational one. Therefore, we cannot assume it is reasonable to follow their example.
    - crtasm 4y ago
      Where are you seeing they were informed it was fixed? In any case, the relevant thing about that issue is two people reported running into a serious problem, months later it's still open with no information on what may have caused it.
      - teddyh 4y ago
        > Where are you seeing they were informed it was fixed? Nowhere. Where did I say they were?
        crtasm 4y ago
        Re-reading I see you were just suggesting a possibility.
- tiberious726 4y ago
  A security issue like this happening even once in a production release is egregious. Their response in the first link was beyond pale. Horrible security issues happen, but that was not a remotely acceptable way to handle it in any project that's more than a toy. Nearly the same issue happening again means they never bothered to set up testing for this and security just isn't something they pay any mind to.
dilippkumar 4y ago
> I would pay _so_ much money for a correctly functioning WebDAV server, maintained by responsible professionals. I’d love to learn more. Can you explain what your use case is and what is “correctly functioning” in this context?
- tiberious726 4y ago
  I have a mandate from the business side that "there is no such thing as the cloud, only other people's hard drives", which I can't really argue against in good conscious, so we need to self-host just about everything we want to use. It would be really nice to be able to let the users run things like collabora online, or easily give them something that looks like Dropbox for certain kinds of files. By correctly functioning, I mean that I can trust that it operates correctly (per the specs) and securely, or at the very least that any major issues are taken seriously by the team. (And getting it FIPS validated would push it over the line to _so_ much money.)
  - rsolva 4y ago
    Have you looked into ONLYOFFICE Workspace Community? I plan to give it a spin soon. I too was dissillusiones after repeatedly having trouble with NextCloud, it seems they move to fast and try to cover to much ground at once.
    - tiberious726 4y ago
      Haven't looked at them since they included their own WebDAV server, could be very interesting, they were pretty much head-to-head with collabora when I tested them last, but Ascensio Systems' Russian ties give me pause given recent events. Even if nothing actually happens, incorporating it into our business practices and then them getting sanctioned would really suck.
  - dilippkumar 4y ago
    My email is in my profile. Drop me a message :)

actionfromafar 4y ago

What do you use a WebDAV server for? Trying to understand if or how I should add it to my offer. :)

jamesponddotco 4y ago

I wonder how ownCloud is doing these days, especially since it looks like they changed everything to Go.

fffrantz 4y ago
Me too! I also wonder about migration from Nextcloud. I might try to migrate a staging Nextcloud instance if I get around to it.
tiberious726 4y ago
I didn't realize this was finally ready! Thanks! Definitely going to check it out.

teddyh 4y ago

> EDIT: looks like they have _not_ cleaned up their act whatsoever: That link states that is is fixed now, though?

crtasm 4y ago
No response from contributors. OP there says: > But after updating ... now it works, but I don't now why and I'm not sure why and if it will continue working properly. I cannot trust such a system.
- teddyh 4y ago
  That could be simply explained as being justification of their decision after the fact. OP may have already decided to stop using the software, so even when they were informed that the software was fixed, they couldn’t back down. It’s a perfectly normal reaction, but not necessarily a rational one. Therefore, we cannot assume it is reasonable to follow their example.
  - crtasm 4y ago
    Where are you seeing they were informed it was fixed? In any case, the relevant thing about that issue is two people reported running into a serious problem, months later it's still open with no information on what may have caused it.
    - teddyh 4y ago
      > Where are you seeing they were informed it was fixed? Nowhere. Where did I say they were?
      - crtasm 4y ago
        Re-reading I see you were just suggesting a possibility.
tiberious726 4y ago
A security issue like this happening even once in a production release is egregious. Their response in the first link was beyond pale. Horrible security issues happen, but that was not a remotely acceptable way to handle it in any project that's more than a toy. Nearly the same issue happening again means they never bothered to set up testing for this and security just isn't something they pay any mind to.

dilippkumar 4y ago

> I would pay _so_ much money for a correctly functioning WebDAV server, maintained by responsible professionals. I’d love to learn more. Can you explain what your use case is and what is “correctly functioning” in this context?

tiberious726 4y ago
I have a mandate from the business side that "there is no such thing as the cloud, only other people's hard drives", which I can't really argue against in good conscious, so we need to self-host just about everything we want to use. It would be really nice to be able to let the users run things like collabora online, or easily give them something that looks like Dropbox for certain kinds of files. By correctly functioning, I mean that I can trust that it operates correctly (per the specs) and securely, or at the very least that any major issues are taken seriously by the team. (And getting it FIPS validated would push it over the line to _so_ much money.)
- rsolva 4y ago
  Have you looked into ONLYOFFICE Workspace Community? I plan to give it a spin soon. I too was dissillusiones after repeatedly having trouble with NextCloud, it seems they move to fast and try to cover to much ground at once.
  - tiberious726 4y ago
    Haven't looked at them since they included their own WebDAV server, could be very interesting, they were pretty much head-to-head with collabora when I tested them last, but Ascensio Systems' Russian ties give me pause given recent events. Even if nothing actually happens, incorporating it into our business practices and then them getting sanctioned would really suck.
- dilippkumar 4y ago
  My email is in my profile. Drop me a message :)