6 ms·
Tarsnap is the only sensible backup provider given the recent history of warantless secret searches in America. SpiderOak is also a contender for file sharing.
by ballard 13y ago
Tarsnap is the only sensible backup provider given the recent history of warantless secret searches in America. SpiderOak is also a contender for file sharing. Both use end-to-end encryption knowable only to the end-user.
- dasil003 13y agoI can't afford to have my family photos backed up to tarsnap. Let the NSA have 'em.
- ballard 13y agoIt's funny you mention that.... I implore 'cperciva to consider a glacier-level service. It is hard to compete with backblaze, but capping network bwdth is proly one way to skin that cat.
- renata 13y agoCrashPlan supports this, although it is not the default.
- scott_karana 13y agoIt's also not auditable: Tarsnap, while not OSS, has easily available source code for perusal and personal use, if I recall.
- temp1346 13y agoThe crashplan JARs decompile pretty easily - I had a go a few months ago, and they weren't obfuscated. Highlights: The crypto is pretty bad - it's using blowfish in CBC mode with a static IV of 0c22384e5a57412b (convert each byte to decimal...). The client-server protocol use 32 bit nonces and MACs, which is. License key validation works by decrypting some packed data from the key after converting the alphabet back to hex. The key is blowfish-cbc encrypted data and the only validation done is verifying the padding - about 1 in 256 randomly generated ones will have valid padding, and the length is not checked.
- teraflop 13y agoWhy on earth would anyone use symmetric crypto for license keys?
- temp1346 13y agoProbably a misguided attempt to keep less data in the database. The key in the client appears to be a test key - verification is server side. The test key: /com/code42/license/LicenseKey.java: private static final byte[] KEY = "Brian in the Conference Room with the Mouse. To be.".getBytes(); I assume this is some inside joke referring to Brian Bispala.
- ballard 13y agoNoice. =) Expounding would kickass, both kinds. ; D
- scott_karana 13y agoThanks! That's really good to know... I assume you're using a temp because of the DMCA?... :(
- temp1346 13y agoBecause possible angry lawyers.
- icebraining 13y agoI like and have used Tarsnap in the past, but it's not like other providers prevent you from uploading encrypted archives, they just don't encrypt them themselves.