4 ms·

No new info here. Dropbox de-duplicates using hashes, so they would use them against a blacklist. The main problem with Dropbox still remains: They can read you

No new info here. Dropbox de-duplicates using hashes, so they would use them against a blacklist. The main problem with Dropbox still remains: They can read your files if they want to and you have only their word that they don't. For now I'm going with Bittorrent sync [1], at least until an equivalent service with an open source comes along. (Would be nice if they open sourced theirs, though.) [1] http://www.bittorrent.com/sync http://www.bittorrent.com/sync

termain 13y ago
Also, SpiderOak.
- JetSpiegel 13y ago
  I use SpiderOak, but they can still read your files, they hold your keys. Something like tarsnap is the only paranoid-proof choice. It's not even distributed as a binary file. https://www.tarsnap.com/ https://www.tarsnap.com/
  - mathrawka 13y ago
    They cannot read your files, only your password can be used to decrypt them, which is not even saved on their server. https://spideroak.com/zero-knowledge/ https://spideroak.com/zero-knowledge/ https://spideroak.com/engineering_matters https://spideroak.com/engineering_matters
    - LoganCale 13y ago
      If you enter your password into a system that they control at any time, they have potential access to your files and can be ordered by the government to change their code so that it does collect your password in order to enable decryption of your files.
      - WildUtah 13y ago
        and can be ordered by the government to change their code so that it does collect your password in order to enable decryption of your files. And they can be ordered to do so secretly with no notice, neither to company management nor to you nor to any judicial body that could review the decision. That's the lesson of Lavabit.
    - kelnos 13y ago
      ... or so they say. I do happen to trust them (and use them), but they absolutely could read your files if they want to: all they have to do is release an updated version of the sync app that does save your password when you first sign in. Or they could start saving passwords when people sign in via their website. Now, I don't believe that they'd do this maliciously (rogue employees aside), but there's always the possibility that a government agency could secretly require them to actively try to capture a particular user's password the next time they sign in.
- kenrikm 13y ago
  I like the concept of SpiderOak and have used them before. However, their software was way too buggy and would stop syncing / working randomly for no apparent reason and their support was unable to help.
aroch 13y ago
Clearskies is the one to keep an eye on. https://github.com/jewel/clearskies https://github.com/jewel/clearskies
- pedrocr 13y ago
  Syncthing seems farther along. Been planning to test both out: https://github.com/calmh/syncthing https://github.com/calmh/syncthing git-annex with the assistant was supposed to be a dropbox replacement too but I haven't had much luck with it.
  - aroch 13y ago
    I don't use git-annex because it doesn't work on homefolders under OSX, making it sort of useless
    - pedrocr 13y ago
      It has a bunch of limitations. It doesn't support hardlinks, it doesn't track folders so empty folders don't show up/disappear, it doesn't sync file permissions, etc. The developer is awesome but he seems to be going at this from "how can I make git more userfriendly" instead of "how can I implement a dropbox that just happens to use git". clearskies/btsync/syncthing won't inherit all the great git stuff (great versioning mostly) but they seem to be more on track to give a good user experience.
voltagex_ 13y ago
I couldn't get BitTorrent sync working without using their tracker (even restricting it to LAN-only it couldn't find my phone on the same network). The application gives very little debugging info, which doesn't help me trust it either. I'll be limiting my use of it and hope that ClearSkies goes well.
e28eta 13y ago
Not open source, and I haven't tried it, but I've heard ads for http://www.filetransporter.com http://www.filetransporter.com which may be an interesting solution for you. They provide discovery, syncing & NAT traversal to a hard drive that you own.

termain 13y ago

Also, SpiderOak.

JetSpiegel 13y ago
I use SpiderOak, but they can still read your files, they hold your keys. Something like tarsnap is the only paranoid-proof choice. It's not even distributed as a binary file. https://www.tarsnap.com/ https://www.tarsnap.com/
- mathrawka 13y ago
  They cannot read your files, only your password can be used to decrypt them, which is not even saved on their server. https://spideroak.com/zero-knowledge/ https://spideroak.com/zero-knowledge/ https://spideroak.com/engineering_matters https://spideroak.com/engineering_matters
  - LoganCale 13y ago
    If you enter your password into a system that they control at any time, they have potential access to your files and can be ordered by the government to change their code so that it does collect your password in order to enable decryption of your files.
    - WildUtah 13y ago
      and can be ordered by the government to change their code so that it does collect your password in order to enable decryption of your files. And they can be ordered to do so secretly with no notice, neither to company management nor to you nor to any judicial body that could review the decision. That's the lesson of Lavabit.
  - kelnos 13y ago
    ... or so they say. I do happen to trust them (and use them), but they absolutely could read your files if they want to: all they have to do is release an updated version of the sync app that does save your password when you first sign in. Or they could start saving passwords when people sign in via their website. Now, I don't believe that they'd do this maliciously (rogue employees aside), but there's always the possibility that a government agency could secretly require them to actively try to capture a particular user's password the next time they sign in.
kenrikm 13y ago
I like the concept of SpiderOak and have used them before. However, their software was way too buggy and would stop syncing / working randomly for no apparent reason and their support was unable to help.

aroch 13y ago

Clearskies is the one to keep an eye on. https://github.com/jewel/clearskies https://github.com/jewel/clearskies

pedrocr 13y ago
Syncthing seems farther along. Been planning to test both out: https://github.com/calmh/syncthing https://github.com/calmh/syncthing git-annex with the assistant was supposed to be a dropbox replacement too but I haven't had much luck with it.
- aroch 13y ago
  I don't use git-annex because it doesn't work on homefolders under OSX, making it sort of useless
  - pedrocr 13y ago
    It has a bunch of limitations. It doesn't support hardlinks, it doesn't track folders so empty folders don't show up/disappear, it doesn't sync file permissions, etc. The developer is awesome but he seems to be going at this from "how can I make git more userfriendly" instead of "how can I implement a dropbox that just happens to use git". clearskies/btsync/syncthing won't inherit all the great git stuff (great versioning mostly) but they seem to be more on track to give a good user experience.

voltagex_ 13y ago

I couldn't get BitTorrent sync working without using their tracker (even restricting it to LAN-only it couldn't find my phone on the same network). The application gives very little debugging info, which doesn't help me trust it either. I'll be limiting my use of it and hope that ClearSkies goes well.

e28eta 13y ago

Not open source, and I haven't tried it, but I've heard ads for http://www.filetransporter.com http://www.filetransporter.com which may be an interesting solution for you. They provide discovery, syncing & NAT traversal to a hard drive that you own.