News for hackers. Stuff that matters.

A comment on Build your own private, encrypted, open-source Dropbox clone. Parent comment

Re:Build your own private, encrypted, open-source Dropbox clone by Tho85 on Saturday July 20, 2013 @12:58PM (#6075715)
You don't have to if you use EncFS. All encryption is done client-side.

The only thing your VPS provider could do is delete your files, but Unison's backup feature should protect you from losing your files (in a way).

[ Parent | on HN ]
Re:Build your own private, encrypted, open-source Dropbox clone by bmslieght on Saturday July 20, 2013 @01:10PM (#6075749)
Your VPS provider, can in effect, chroot in to your environment, so EncFS is vunerable.
[ Parent | on HN ]
Re:Build your own private, encrypted, open-source Dropbox clone by pyre on Saturday July 20, 2013 @02:18PM (#6076014)
The EncFS is mounted locally (client-side), so the files aren't decrypted at all on the server-side. You're just syncing fully encrypted files.
[ Parent | on HN ]
Re:Build your own private, encrypted, open-source Dropbox clone by duaneb on Saturday July 20, 2013 @01:32PM (#6075839)
If encryption is done client-side, the data is still encrypted server-side and chrooting does nothing.
[ Parent | on HN ]
Re:Build your own private, encrypted, open-source Dropbox clone by Tho85 on Saturday July 20, 2013 @01:33PM (#6075841)
What do you mean by 'vulnerable'? All encryption is done on your computer/notebook, so a chroot on the server doesn't decrypt the files.
[ Parent | on HN ]