9 ms·

OwnCloud Server 8.0

102 points by trampi 12y ago

scottlinux 12y ago
https://owncloud.org/eight/ https://owncloud.org/eight/
wtbob 12y ago
OwnCloud looks pretty neat, but I do wish that it would support client-side encryption; I don't trust a machine I'm renting in a data centre any more than I do Facebook or Google. I'm aware that there (sadly) aren't standards for browser-uploaded encrypted files, sharing encrypted files efficiently and so forth, so it's hardly their fault.
- pjc50 12y ago
  I think for this use case you'd keep the machine at home and reverse-proxy or VPN it to the outside world.
- neoeldex 12y ago
  Can you even trust a machine you built yourself, running at home? Not saying you're not right being wary, but who can you trust? Can you trust yourself?
  - lukifer 12y ago
    Like so many things, security is a spectrum. Just because an intruder can break your window, doesn't mean you shouldn't lock your front door.
- BetaMechazawa 12y ago
  There is an encryption plugin that gets bundled with owncloud that allows you to encrypt the data stored on the server
- ukigumo 12y ago
  If your worry is with data at rest, then owncloud already supports it (http://doc.owncloud.org/server/7.0/user_manual/files/encryption.html http://doc.owncloud.org/server/7.0/user_manual/files/encrypt...). I host my servers with AWS so I use Gluster encrypted bricks with backups to a S3 bucket as well as the built-in encryption capability from Owncloud.
  - edwintorok 12y ago
    SX has client-side encryption if you use the SX tools (sxcp) to upload/download your files to volumes that have encryption enabled: http://blog.skylable.com/2014/09/transparency-reports-server-side-encryption-the-placebo-of-privacy/ http://blog.skylable.com/2014/09/transparency-reports-server... Disclaimer: I'm a co-founder of Skylable
    - ukigumo 12y ago
      Looks very interesting, I'll have a better look at the product tonight.
  - wtbob 12y ago
    Yeah, but: > You don’t have to do anything special, as it uses your ownCloud login as the password for your unique private encryption key. So the server can decrypt my files at will, since it has access to my plaintext password.
- toggle 12y ago
  They've said that they don't intend to support this because the web interface has features like previewing images and editing ODF docs. So, in order for that to work, the server has to be able to read the actual file. As others have pointed out, there's a plugin for encryption at rest, but that can be decrypted by the server. Sounds like client side encryption is a no-go for the time being.
- naiyt 12y ago
  Have you tried Seafile? It supports client side encryption.
zimbatm 12y ago
Unfortunately OwnCloud is fundamentally broken because all "apps" share the same process and have to be written in PHP. The bigger the ecosystem gets, the harder it is going to be to deal with security issues. If OwnCloud wants to become a reference platform for other developers it really has to tackle sandboxing and permissions.
- UnoriginalGuy 12y ago
  Just playing devil's advocate, but isn't this true with many CMSs? Most implement "users" (and or groups) either in-house or using the underlying OS, and when it is the underlying OS the CMS needs access to all of the user's files anyway to make cooperation and interoperability work, essentially placing a big bullseye on the CMS system itself.
  - mariocesar 12y ago
    It's true and is the reason why so many PHP powered CMS are so insecure, how many times do you hear about a new wordpress exploit?
    - UnoriginalGuy 12y ago
      It really has nothing to do with PHP. Changing the language or framework wouldn't inherently change the design. e.g. http://www.cvedetails.com/vulnerability-list/vendor_id-26/product_id-11116/Microsoft-Sharepoint-Server.html http://www.cvedetails.com/vulnerability-list/vendor_id-26/pr...
      - tankenmate 12y ago
        Having said that PHP does make it very hard to run each interpreter process as the user it is doing work on behalf of. Some of the best systems out there run each user's process under it's own uid:gid (or equivalent), and each user has their own filespace and/or database. Obviously this pushes the separation issues down to the OS kernel rather than in the app, but most widely used OS kernels get at least an order of magnitude more, most of the time several orders more, testing for these user separation security features. NIH, re-inventing the wheel and all that.
drzaiusapelord 12y ago
This is great news. I've been looking for an excuse to move away from my bug-ridden Pydio install. I tried upgrading to the newest version of Pydio only to have the upgrade process completely break the site. OwnCloud just looks better managed and more stable for production.
pgl 12y ago
The site seems to be down right now. Here's the text-only Google cache for anyone else who just wants to see what's new: http://webcache.googleusercontent.com/search?q=cache:owncloud.org/eight/&strip=1 http://webcache.googleusercontent.com/search?q=cache:ownclou...
majormjr 12y ago
Are there any alternatives that have a better syncing mechanism? I really like ownClouds interface but I have encountered a few bugs with syncing files.
- jepper 12y ago
  Bittorent sync? Discoverability and multiple folder syncing has been a problem for me. I would be very interested in a perfect method to track and sync multiple folders on multiple computers
  - shmerl 12y ago
    Too bad it's closed.
- pestaa 12y ago
  Seafile has been flawless for me.
  - raphman_ 12y ago
    Seconded - we have been running Seafile for the last few months with several shared folders. It works flawlessly and is quite fast.
- biokoda 12y ago
  There is: http://www.emitcloud.com http://www.emitcloud.com
  - SilverEdition 12y ago
    nice solution
- ef4 12y ago
  I highly recommend Syncthing.
  - 12y ago
WA 12y ago
Note: I just tried to upgrade the version following the docs. I didn't notice that I read the 7.0 docs for upgrading and there, it says you should download "owncloud-latest.tar.bz2". This will download an old version of ownCloud. Use this link to get it: https://download.owncloud.org/community/owncloud-8.0.0.tar.bz2 https://download.owncloud.org/community/owncloud-8.0.0.tar.b...
stp-ip 12y ago
An up to date demo is available at https://demo.owncloud.org https://demo.owncloud.org.
frabcus 12y ago
I'd love to see a review of this from someone who has tried using it for a while - also compared to Sandstorm which is similar (newer, more sandboxed) https://sandstorm.io/ https://sandstorm.io/
state 12y ago
Are there any active OwnCloud users out there? I'm curious about your experience. How do you feel about it? What do you use it for primarily?
- dantheta 12y ago
  I'm running one for calendar syncing (cyanogenmod and iOS clients), personal file storage and as a limited photo gallery. The automatic file sync from my phone is good too. It's running at home on my server. Setup was straightforward, and although I had the odd couple of glitches after setup, it was nothing too major. It's worked out pretty well.

102 points by trampi 12y ago

https://owncloud.org/eight/ https://owncloud.org/eight/

wtbob 12y ago

OwnCloud looks pretty neat, but I do wish that it would support client-side encryption; I don't trust a machine I'm renting in a data centre any more than I do Facebook or Google. I'm aware that there (sadly) aren't standards for browser-uploaded encrypted files, sharing encrypted files efficiently and so forth, so it's hardly their fault.

pjc50 12y ago
I think for this use case you'd keep the machine at home and reverse-proxy or VPN it to the outside world.
neoeldex 12y ago
Can you even trust a machine you built yourself, running at home? Not saying you're not right being wary, but who can you trust? Can you trust yourself?
- lukifer 12y ago
  Like so many things, security is a spectrum. Just because an intruder can break your window, doesn't mean you shouldn't lock your front door.
BetaMechazawa 12y ago
There is an encryption plugin that gets bundled with owncloud that allows you to encrypt the data stored on the server
ukigumo 12y ago
If your worry is with data at rest, then owncloud already supports it (http://doc.owncloud.org/server/7.0/user_manual/files/encryption.html http://doc.owncloud.org/server/7.0/user_manual/files/encrypt...). I host my servers with AWS so I use Gluster encrypted bricks with backups to a S3 bucket as well as the built-in encryption capability from Owncloud.
- edwintorok 12y ago
  SX has client-side encryption if you use the SX tools (sxcp) to upload/download your files to volumes that have encryption enabled: http://blog.skylable.com/2014/09/transparency-reports-server-side-encryption-the-placebo-of-privacy/ http://blog.skylable.com/2014/09/transparency-reports-server... Disclaimer: I'm a co-founder of Skylable
  - ukigumo 12y ago
    Looks very interesting, I'll have a better look at the product tonight.
- wtbob 12y ago
  Yeah, but: > You don’t have to do anything special, as it uses your ownCloud login as the password for your unique private encryption key. So the server can decrypt my files at will, since it has access to my plaintext password.
toggle 12y ago
They've said that they don't intend to support this because the web interface has features like previewing images and editing ODF docs. So, in order for that to work, the server has to be able to read the actual file. As others have pointed out, there's a plugin for encryption at rest, but that can be decrypted by the server. Sounds like client side encryption is a no-go for the time being.
naiyt 12y ago
Have you tried Seafile? It supports client side encryption.

zimbatm 12y ago

Unfortunately OwnCloud is fundamentally broken because all "apps" share the same process and have to be written in PHP. The bigger the ecosystem gets, the harder it is going to be to deal with security issues. If OwnCloud wants to become a reference platform for other developers it really has to tackle sandboxing and permissions.

UnoriginalGuy 12y ago
Just playing devil's advocate, but isn't this true with many CMSs? Most implement "users" (and or groups) either in-house or using the underlying OS, and when it is the underlying OS the CMS needs access to all of the user's files anyway to make cooperation and interoperability work, essentially placing a big bullseye on the CMS system itself.
- mariocesar 12y ago
  It's true and is the reason why so many PHP powered CMS are so insecure, how many times do you hear about a new wordpress exploit?
  - UnoriginalGuy 12y ago
    It really has nothing to do with PHP. Changing the language or framework wouldn't inherently change the design. e.g. http://www.cvedetails.com/vulnerability-list/vendor_id-26/product_id-11116/Microsoft-Sharepoint-Server.html http://www.cvedetails.com/vulnerability-list/vendor_id-26/pr...
    - tankenmate 12y ago
      Having said that PHP does make it very hard to run each interpreter process as the user it is doing work on behalf of. Some of the best systems out there run each user's process under it's own uid:gid (or equivalent), and each user has their own filespace and/or database. Obviously this pushes the separation issues down to the OS kernel rather than in the app, but most widely used OS kernels get at least an order of magnitude more, most of the time several orders more, testing for these user separation security features. NIH, re-inventing the wheel and all that.

drzaiusapelord 12y ago

This is great news. I've been looking for an excuse to move away from my bug-ridden Pydio install. I tried upgrading to the newest version of Pydio only to have the upgrade process completely break the site. OwnCloud just looks better managed and more stable for production.

pgl 12y ago

The site seems to be down right now. Here's the text-only Google cache for anyone else who just wants to see what's new: http://webcache.googleusercontent.com/search?q=cache:owncloud.org/eight/&strip=1 http://webcache.googleusercontent.com/search?q=cache:ownclou...

majormjr 12y ago

Are there any alternatives that have a better syncing mechanism? I really like ownClouds interface but I have encountered a few bugs with syncing files.

jepper 12y ago
Bittorent sync? Discoverability and multiple folder syncing has been a problem for me. I would be very interested in a perfect method to track and sync multiple folders on multiple computers
- shmerl 12y ago
  Too bad it's closed.
pestaa 12y ago
Seafile has been flawless for me.
- raphman_ 12y ago
  Seconded - we have been running Seafile for the last few months with several shared folders. It works flawlessly and is quite fast.
biokoda 12y ago
There is: http://www.emitcloud.com http://www.emitcloud.com
- SilverEdition 12y ago
  nice solution
ef4 12y ago
I highly recommend Syncthing.
- 12y ago

WA 12y ago

Note: I just tried to upgrade the version following the docs. I didn't notice that I read the 7.0 docs for upgrading and there, it says you should download "owncloud-latest.tar.bz2". This will download an old version of ownCloud. Use this link to get it: https://download.owncloud.org/community/owncloud-8.0.0.tar.bz2 https://download.owncloud.org/community/owncloud-8.0.0.tar.b...

stp-ip 12y ago

An up to date demo is available at https://demo.owncloud.org https://demo.owncloud.org.

frabcus 12y ago

I'd love to see a review of this from someone who has tried using it for a while - also compared to Sandstorm which is similar (newer, more sandboxed) https://sandstorm.io/ https://sandstorm.io/

state 12y ago

Are there any active OwnCloud users out there? I'm curious about your experience. How do you feel about it? What do you use it for primarily?

dantheta 12y ago
I'm running one for calendar syncing (cyanogenmod and iOS clients), personal file storage and as a limited photo gallery. The automatic file sync from my phone is good too. It's running at home on my server. Setup was straightforward, and although I had the odd couple of glitches after setup, it was nothing too major. It's worked out pretty well.