Forgot your password?
typodupeerror

Submission + - Which encrypted cloud storage really work?

An anonymous reader writes: Almost three years ago, I started looking for a cloud storage service. Encryption and the "zero-knowledge" concept were not concerns. Frankly, after two weeks testing services, it boiled down to one service I used for almost 2 years. It was perfect — in the technical sense — because it simply works as advertised and is one of the cheapest for 500GB.

One of the main problems I have found with them was the fact that sync did not work correctly for all. Only two of them were able to sync a large folder structure (hundreds of thousands files in thousands of folders) without mysteriously duplicating, deleting or "reappearing" files, instantaneously detecting changes and replicating them without issues. It even handled things like creating, renaming and deleting files quickly, without duplicating them.

But this year, I decided changing that service for another one, that would encrypt my files before leaving my machine. Some of these services call themselves "zero-knowledge" services, because (as they claim) clear text does not leave your host: they only receive encrypted data — keys or passwords are not sent.

I did all testing I could, with the free bit of their services, and then, chose one of them. After a while, when the load got higher (more files, more folders, more GB...), my horror story began. I started experiencing sync problems of all sorts. In fact, I have payed for and tested another service and both had the same issues with sync. Worse, one of them could not even handle restoring files correctly. I had to restore from my local backup more than once and I ended up loosing files for real.

In your experience, which service (or services) are really able to handle more than a hundred files, in sync within 5+ hosts, without messing up (deleting, renaming, duplicating) files and folders?

Comment US More Expensive than Elsewhere? Make me laugh. (Score 1) 569

Let me fix that for you: "US More Expensive than Other 1st World Countries". I am in Brazil and I pay U$ 160,00 for 50 Mbps. In fact, I pay that for a 50 Mbps last-mile link, because my real Internet download performance hardly comes to that. We have a national regulation / monitoring agency (Anatel) that watch broadband services and, surprise, carriers always miss their monthly performance targets.

Comment Concerns About Security or Privacy? Vanished. (Score 1) 398

Just upgraded two PCs. a Sony Vaio VPCZ2290X legacy PC (with TPM) and a HP Envy2. *BOTH* were configured to use BitLocker Drive Encryption. Both were configured to ask for a PIN at boot. Guess what? Windows 8.1 upgrade not only booted the machine lots of times but it didnt ask for the PIN, not only once.

I dont know if I should worry. Guess that I should, only if I have something private stored on those (and I mean... something I dont want Microsoft or any government to get their hands on).

Once the upgrade completed, it started asking for the PIN again. Please correct me if I am wrong (I want to be!!) but, in my head, that means only two possible things:

1. Windows stores my PIN or
2. Windows has a key to secretly access bitlocker drives directly

I dont know what is worse.

To be honest, if I had any doubt about the complete lack of security, privacy etc on the platform, this simple thing just washed it clean.

Does anyone know when TrueCrypt will be available for Windows 8, with PBA?

Comment I can say that I understand. (Score 1) 655

Years ago my life used to be a mess. I started playing EVE-Online. Played for years and, during that period, my life got messier. I just got transported to the MMOG world for good. Used to play 16 to 18 hours a day at peak. But I don't regret it. It was not the root cause of my depression, but something else. In fact, I've made some really nice friends I talk to even years after that. In fact, the game, the people involved, and lots of other game related factors made me feel "useful" again. I mean, It is just a game, but those accomplishments got to the point where I asked myself: "if I'm able to accomplish things in a game, and have a social life inside an UI, why can't I have this IRL ?" Well, now I have it. Now I can say for sure that EVE helped me a lot. I have an active account (in fact, 2) and I simply don't have the time to play anymore, of course, due to real life. But tbh, I would like to have the time to play again somehow.

Comment False reporting ? (Score 1) 159

Maybe Im completely wrong, I didn't install the app, nor will do for now (let's say I'll wait a bit to see where it goes).

But since this app seems to simulate actual servers running on those ports, I would think that (obviously) you need those ports open and free to bind. That means that you can't install it on a NAT perimeter machine (you need, for example, port 80/tcp binded to portmap it to the server inside the DMZ).

If you install it on a machine inside your network, behind a firewall, of course, it will be masked out by your default filtering at the border. I don't think most of our security aware network administrators will portforward lots of "warm exploitable ports" to the internal network to make it work correctly .

so, in a summary, it will report activity on commonly open ports, or even misconfigured ports. Worse, those ports reported may indicate only internal network activity and not real world internet worm activity due to the default perimeter filtering.

It's completely different from other projects like dshield that are actually based on firewall logs, or ids logs that usually take the network and a layer 2 perspective.

Please tell me I'm wrong, otherwise I can't see the usefulness of this app.

Slashdot Top Deals

"Mr. Spock succumbs to a powerful mating urge and nearly kills Captain Kirk." -- TV Guide, describing the Star Trek episode _Amok_Time_

Working...