4 ms·

Why not just run encfs or ecryptfs locally and then backup the encrypted regular files?

by pedrocr 13y ago

computer 13y ago
Or use duplicity. It even directly supports many cloud-services as backend, including Google Drive ($2 for 100GB, $10 for 1TB) Dropbox, Onedrive, etc. It encrypts, deduplicates, stores old versions, etc.
- 8_hours_ago 13y ago
  I'd love to use duplicity, but in the 3rd paragraph of their website is the sentence "Duplicity is still in Beta.". I'd much rather trust my backups to tarsnap, which is not in beta. Furthermore, and perhaps even more importantly, tarsnap offers support which duplicity does not. When my hard drives decide to die, I really want someone who I can contact if there are any issues restoring from backups.
  - chuckup 13y ago
    Check out Duplicati - same idea as duplicity, but in active development, main developer posts to his support group frequently, overall very solid
drdaeman 13y ago
Since CrashPlan uses blowfish-448-cbc-sha1 (a weird choice) and may (I'm uncertain on this) have ability to push configuration changes from remote, I've considered that possibility, because of CrashPlan's "unlimited" offer. Unfortunately, it's barely usable due to recovery issues. You can't mount CrashPlan as a filesystem (well, without ton of reverse engineering), so that's not an option unless you're satisfied with all-or-nothing recovery without possibility to pick and restore just certain files of interest.
- pedrocr 13y ago
  A middle ground there that would work for restore of particular files is to use ecryptfs/encfs without encrypting filenames. I think ecryptfs at least knows how to do this. Then you can download the file with the proper name, but the contents are encrypted and decrypt them locally. You could probably also hack up something to figure out locally what encrypted filename corresponds to what regular filename and go fish for the encrypted filename in CrashPlan. It will probably be clunky though.
- dublinben 13y ago
  You can absolutely "pick and restore just certain files of interest" when restoring with CrashPlan.
  - drdaeman 13y ago
    That's if you only rely on CrashPlan-provided encryption, which is certainly not a cream of the crop. We were talking about eCryptfs/encFS-encrypted copy, where filenames are (usually) encrypted. That means navigating around names like `l00Dqf,A49VqDd8AveLMrbBE` or `qR,bmE-73cA2H6wOxZxlKSwD`.
kakashi19 13y ago
how do u share a file encrypted using encfs with someone else?

Why not just run encfs or ecryptfs locally and then backup the encrypted regular files?

by pedrocr 13y ago

Why not just run encfs or ecryptfs locally and then backup the encrypted regular files?

Or use duplicity. It even directly supports many cloud-services as backend, including Google Drive ($2 for 100GB, $10 for 1TB) Dropbox, Onedrive, etc. It encrypts, deduplicates, stores old versions, etc.

8_hours_ago 13y ago
I'd love to use duplicity, but in the 3rd paragraph of their website is the sentence "Duplicity is still in Beta.". I'd much rather trust my backups to tarsnap, which is not in beta. Furthermore, and perhaps even more importantly, tarsnap offers support which duplicity does not. When my hard drives decide to die, I really want someone who I can contact if there are any issues restoring from backups.
- chuckup 13y ago
  Check out Duplicati - same idea as duplicity, but in active development, main developer posts to his support group frequently, overall very solid

drdaeman 13y ago

Since CrashPlan uses blowfish-448-cbc-sha1 (a weird choice) and may (I'm uncertain on this) have ability to push configuration changes from remote, I've considered that possibility, because of CrashPlan's "unlimited" offer. Unfortunately, it's barely usable due to recovery issues. You can't mount CrashPlan as a filesystem (well, without ton of reverse engineering), so that's not an option unless you're satisfied with all-or-nothing recovery without possibility to pick and restore just certain files of interest.

pedrocr 13y ago
A middle ground there that would work for restore of particular files is to use ecryptfs/encfs without encrypting filenames. I think ecryptfs at least knows how to do this. Then you can download the file with the proper name, but the contents are encrypted and decrypt them locally. You could probably also hack up something to figure out locally what encrypted filename corresponds to what regular filename and go fish for the encrypted filename in CrashPlan. It will probably be clunky though.
dublinben 13y ago
You can absolutely "pick and restore just certain files of interest" when restoring with CrashPlan.
- drdaeman 13y ago
  That's if you only rely on CrashPlan-provided encryption, which is certainly not a cream of the crop. We were talking about eCryptfs/encFS-encrypted copy, where filenames are (usually) encrypted. That means navigating around names like `l00Dqf,A49VqDd8AveLMrbBE` or `qR,bmE-73cA2H6wOxZxlKSwD`.

kakashi19 13y ago

how do u share a file encrypted using encfs with someone else?