Summary of the link: OwnCloud is using Mersenne Twister (not secure) seeded by time of day and PID (which is not nearly enough entropy) to generate keys. The e

Summary of the link: OwnCloud is using Mersenne Twister (not secure) seeded by time of day and PID (which is not nearly enough entropy) to generate keys. The encryption is done in ECB mode, which leaks data (https://en.wikipedia.org/wiki/Block_cipher_modes_of_operation#Electronic_codebook_.28ECB.29 https://en.wikipedia.org/wiki/Block_cipher_modes_of_operatio...). The encryption key is stored in the clear in session data, which usually resides in /tmp. There's more, but those seem to be the worst parts.