3 ms·

The problem I have with Dropbox along with all the other solutions is that I don't know of any way to do trust no one encryption including file names other then

by jareds 12y ago

The problem I have with Dropbox along with all the other solutions is that I don't know of any way to do trust no one encryption including file names other then a massave truecrypt volume. If anyone knows a solution for this on either Windows or Linux I'd like to know about it.

darkstar999 12y ago
A truecrypt container on Dropbox isn't very ideal either, you'd have to up/download the whole thing instead of just the file you need. I've heard that Spideroak is a better solution. https://spideroak.com/ https://spideroak.com/
unixoid 12y ago
I personally use encfs for my sensitive data.
kalleboo 12y ago
mega.co.nz seems like the closest you'll get, but their Linux sync client has been "coming soon" for a year (you can always use the Chrome/Firefox plugins though, it's just not seamless)
VLM 12y ago
Well buddy let me help you out. Since I have a system that does exactly what you're asking for on Debian Linux. I set it up a long time ago so I may be forgetting something. Only an idiot would do "security stuff" blindly without researching on their own and my personal security hangups do not necessarily match anyone elses on the planet. So thats the disclaimer. Given that disclaimer: Assuming a sane linux like Debian, as root "apt-get install fuse encfs". Make sure encfs shows up in the "lsmod | grep encfs" list. Make sure your username is in the fuse group, so "man adduser" or hope "adduser jareds fuse". If you add yourself to a group, you're not "really" in that group until you log out and log back in. That sounds like an awful amount of work but its really about 5 minutes. (and I do groups in LDAP, you probably don't, and I don't remember if this is proper syntax for old fashioned local files) In yer ~/Dropbox, make a directory encfs In ~/Dropbox/encfs make directories for your stuff. Lets be uncreative and make a directory called passwords to store passwords lists and things Make a script in ~/Dropbox/encfs called encfs.sh and chmod a+x it so you can run it. #!/bin/bash # This script is ~/Dropbox/encfs/encfs.sh # Dont forget to chmod a+x this script # apt-get install fuse encfs # make sure fuse shows up in lsmod | grep fuse # make sure user is in group fuse as in adduser vince fuse and log out and log back in echo We are now mounting your passwords directory aka ~/passwords fusermount -u /home/jareds/passwords encfs /home/jareds/Dropbox/encfs/passwords /home/jareds/passwords exit 0 I'm making some assumptions about the locations of your home directory. You should be able to figure it out. I use AFS at home which makes for long path names. Others use NFS. Whatever. It seems self explanatory enough? That unmount command will fail if its not mounted. Thats OK. The reason why this is necessary is if the system crashes or who knows what, sometimes the fuse mount gets stuck and can't be re-added by encfs. Annoying. But trying to unmount cures a stuck fuse mount. Run it and I forget how you set your password. Likely it prompts. Been a long time since I set this up and I forget how to create. The script above is great for remounting an existing encfs, it is a somewhat edited version of what I use. Anyway assuming you get it working go visit ~/passwords, and make a couple files. Don't matter what, just df > test1, free -m > test2 its all good enough. Go visit ~/Dropbox/encfs/passwords and see instead of test1 and test2, two filenames looking like line noise and the contents look like line noise. Edited to emphasize its one encrypted file per decrypted file, not a single giant file. If you're ever bored, look at the xml file ~/Dropbox/encfs/passwords/.encfs6.xml So I'm using 256 bit AES with 1024 byte blocks, OK then. Encfs is no speed demon. I wouldn't go putting 1080p high def video files on it. Then again I have no idea why I'd want to encrypt those. (edited to add, I'm in "submitting too fast" prison, but to answer webmaven's question, wrapping in encfs also fixes the case conflict problem that dropbox has... you could presumably use UTF-8 filenames for all encfs cares, the encrypted filenames will look like 32 characters of line noise no matter what you name the file)
katbyte 12y ago
Boxcryptor i think will do what you want, I've not tried it myself yet thou.
- jpalomaki 12y ago
  I'm using Boxcryptor Classic on daily basis for many of my projects and it works really well. The only problem I have seen was caused by Dropbox path lenght limitation. If you opt to also encrypt the file/directory names that paths quickly become too long for Dropbox in certain cases (for example Java projects which tend to have deep directory structures). I decided that a good compromise is to leave the file names unencrypted and just crypt the contents. This way it is also easier to recover some old versions via Dropbox Web UI if needed (you don't see the contents, but at least you easily see what file you are dealing with).
rakoo 12y ago
It's quite heavy, but Tahoe-LAFS [0] is here for that. Dropbox becomes a simple HDD in the cloud, it only stores stuff and has no logic whatsoever. See [1] for an example of how you can use it (along with other providers to increase resilience of your data) [0] http://tahoe-lafs.org/ http://tahoe-lafs.org/ [1] http://bitcartel.wordpress.com/2012/10/21/rbic-redundant-bunch-of-independent-clouds/ http://bitcartel.wordpress.com/2012/10/21/rbic-redundant-bun...

by jareds 12y ago

darkstar999 12y ago

A truecrypt container on Dropbox isn't very ideal either, you'd have to up/download the whole thing instead of just the file you need. I've heard that Spideroak is a better solution. https://spideroak.com/ https://spideroak.com/

unixoid 12y ago

I personally use encfs for my sensitive data.

kalleboo 12y ago

mega.co.nz seems like the closest you'll get, but their Linux sync client has been "coming soon" for a year (you can always use the Chrome/Firefox plugins though, it's just not seamless)

VLM 12y ago

Well buddy let me help you out. Since I have a system that does exactly what you're asking for on Debian Linux. I set it up a long time ago so I may be forgetting something. Only an idiot would do "security stuff" blindly without researching on their own and my personal security hangups do not necessarily match anyone elses on the planet. So thats the disclaimer. Given that disclaimer: Assuming a sane linux like Debian, as root "apt-get install fuse encfs". Make sure encfs shows up in the "lsmod | grep encfs" list. Make sure your username is in the fuse group, so "man adduser" or hope "adduser jareds fuse". If you add yourself to a group, you're not "really" in that group until you log out and log back in. That sounds like an awful amount of work but its really about 5 minutes. (and I do groups in LDAP, you probably don't, and I don't remember if this is proper syntax for old fashioned local files) In yer ~/Dropbox, make a directory encfs In ~/Dropbox/encfs make directories for your stuff. Lets be uncreative and make a directory called passwords to store passwords lists and things Make a script in ~/Dropbox/encfs called encfs.sh and chmod a+x it so you can run it. #!/bin/bash # This script is ~/Dropbox/encfs/encfs.sh # Dont forget to chmod a+x this script # apt-get install fuse encfs # make sure fuse shows up in lsmod | grep fuse # make sure user is in group fuse as in adduser vince fuse and log out and log back in echo We are now mounting your passwords directory aka ~/passwords fusermount -u /home/jareds/passwords encfs /home/jareds/Dropbox/encfs/passwords /home/jareds/passwords exit 0 I'm making some assumptions about the locations of your home directory. You should be able to figure it out. I use AFS at home which makes for long path names. Others use NFS. Whatever. It seems self explanatory enough? That unmount command will fail if its not mounted. Thats OK. The reason why this is necessary is if the system crashes or who knows what, sometimes the fuse mount gets stuck and can't be re-added by encfs. Annoying. But trying to unmount cures a stuck fuse mount. Run it and I forget how you set your password. Likely it prompts. Been a long time since I set this up and I forget how to create. The script above is great for remounting an existing encfs, it is a somewhat edited version of what I use. Anyway assuming you get it working go visit ~/passwords, and make a couple files. Don't matter what, just df > test1, free -m > test2 its all good enough. Go visit ~/Dropbox/encfs/passwords and see instead of test1 and test2, two filenames looking like line noise and the contents look like line noise. Edited to emphasize its one encrypted file per decrypted file, not a single giant file. If you're ever bored, look at the xml file ~/Dropbox/encfs/passwords/.encfs6.xml So I'm using 256 bit AES with 1024 byte blocks, OK then. Encfs is no speed demon. I wouldn't go putting 1080p high def video files on it. Then again I have no idea why I'd want to encrypt those. (edited to add, I'm in "submitting too fast" prison, but to answer webmaven's question, wrapping in encfs also fixes the case conflict problem that dropbox has... you could presumably use UTF-8 filenames for all encfs cares, the encrypted filenames will look like 32 characters of line noise no matter what you name the file)

katbyte 12y ago

Boxcryptor i think will do what you want, I've not tried it myself yet thou.

jpalomaki 12y ago
I'm using Boxcryptor Classic on daily basis for many of my projects and it works really well. The only problem I have seen was caused by Dropbox path lenght limitation. If you opt to also encrypt the file/directory names that paths quickly become too long for Dropbox in certain cases (for example Java projects which tend to have deep directory structures). I decided that a good compromise is to leave the file names unencrypted and just crypt the contents. This way it is also easier to recover some old versions via Dropbox Web UI if needed (you don't see the contents, but at least you easily see what file you are dealing with).

rakoo 12y ago

It's quite heavy, but Tahoe-LAFS [0] is here for that. Dropbox becomes a simple HDD in the cloud, it only stores stuff and has no logic whatsoever. See [1] for an example of how you can use it (along with other providers to increase resilience of your data) [0] http://tahoe-lafs.org/ http://tahoe-lafs.org/ [1] http://bitcartel.wordpress.com/2012/10/21/rbic-redundant-bunch-of-independent-clouds/ http://bitcartel.wordpress.com/2012/10/21/rbic-redundant-bun...