top 7 comments

sorted by: hot top controversial new old
[–] 5 points 1 year ago* (last edited 1 year ago)

There is absolutely no legitimate reason to implement "cloud" storage or backup in a way that does not encrypt on the client side, with open, verifiable standard if not open source for the client software, in such a way that it can't be read by the provider.

I remember when I got PGP mid 90s and thought: Wow, in 6 months, everybody will use it! Yet it never caught on. User stupidity, elitism or a bit of both?

At the height of pre-encryption WhatsApp I remember talking about PGP to some younger relatives about the problem of intercepted messages, and they had a hard time believing that we had "access to that kind of technology" in the 90s.

Somehow, they managed to normalise sending your stuff out there based entirely on trust in corporations and governments, although the problem was solved technically long ago.

Problem is: They fight back by introducing "convenience" that only works in clouds they can access, such as "AI" in Google or Apple Images. E. g. you can enter "cat" and it will show all your cat photos.

But I got to admit that I TALK a lot about a switching to a self-hosted image solution such as PhotoPrism, but lack in execution, other than putting it on my todo-list.

  • source
  • [–] 2 points 1 year ago (6 children)

    iCloud backup is encrypted if the option is chosen. It’s deactivated by default. The backup is linked to the signature of your devices, or a phrase you are only shown once when activating it. AFAIK it’s secure until now.

  • source
  • hideshow 6 child comments
  • [+] [S] 12 points 1 year ago (5 children)
  • [–] 2 points 1 year ago (4 children)
  • [+] [S] 8 points 1 year ago (3 children)
  • [–] 1 point 1 year ago (2 children)

    They say themselves that they don’t have the key, and since there is no evidence that they do, I believe that.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 4 points 1 year ago

    Would you trust Google if they said so? And also why would there be evidence of government doing things behind your back. Wouldn't that compromise national security? It only ever pops up when it doesn't matter, so I guess it's okay?

    https://www.axios.com/2023/12/06/apple-google-requests-push-notification-data

    https://theintercept.com/2017/02/22/how-peter-thiels-palantir-helped-the-nsa-spy-on-the-whole-world/

    It's not like Apple has a history to bowing down to authoritarians.

    https://www.nytimes.com/2021/05/17/technology/apple-china-censorship-data.html

    Welp, that all looks clean to me. Thank Tim Apple for the golden gift to the emperor. They're totally not bending the knee or assisting surveillance to make the their stonks go up. They're very principled.

    They said so, and there's literally no evidence against it. 😉😉

  • source
  • parent
  • load more comments (1 reply)
  • 66 comments in c/linuxmemes@lemmy.world view that post
    [–] 67 points 1 year ago (1 child)

    biggest invasion of privacy so far...

  • source
  • hideshow 1 child comment
  • [–] 22 points 1 year ago (4 children)
  • [–] 8 points 1 year ago (3 children)

    Keep your mind sharp and throw away all that junk (harddrives) it's making you lazy I call it local local storage just remember everything it's that easy

  • source
  • parent
  • hideshow 3 child comments
  • [+] 44 points 1 year ago (29 children)
  • [–] 14 points 1 year ago (24 children)

    unless it's self-hosted (or hosted by a trustworthy friend who's realky into privacy)

  • source
  • parent
  • hideshow 24 child comments
  • [+] -21 points 1 year ago (23 children)

    I m sick all self hosted bullshit,do u really think everyone have that much spare time to spare on such bullshit.

  • source
  • parent
  • hideshow 23 child comments
  • [–] 10 points 1 year ago* (last edited 1 year ago) (6 children)

    Quite some people do, so it's great such options exist.

    My own gripe is with self-hosted apps that don't need a server to begin with.

    Why do I have to run a server to manage my bookmarks? Write down recipes? Control available stock? Manage finances?

    All that can be done via local-first apps that may then have some backup functionality (or have files in one place so I could sync them). Adding a server layer only adds complexity and forces me to keep it on or toggle every time, affecting performance and battery life.

  • source
  • parent
  • hideshow 6 child comments
  • [–] 1 point 1 year ago (3 children)

    You dont have to open them up to the internet, I use tailscale, host on my own pc, runtipi makes most apps easy to setup and update, one click (plus filling out any specific info like username/password unless you create the account when you open the app for the first time)

  • source
  • parent
  • hideshow 3 child comments
  • [–] 1 point 1 year ago (2 children)

    I know how it works, my problem is that server software is meant to run constantly in the background, and needs to be managed in a specific way, and I specifically don't want this to happen.

    I know I can put self-hosted server behind a VPN, but it's an entirely different use case.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 0 points 1 year ago*

    Most of the popular ones have apps you can download seperately and the server just works to connect devices and allow you to use a web interface if necessary, like if you want a pc app it already works like a pc app, its just accessed through your webbrowser?

    These do tend to be open source so they aren't also going to make free apps in different codebases and pay developer fees, not realistic, what is realistic is web apps that ppl can easily copy and host themselves. They aren't android/ios developers.

  • source
  • parent
  • [+] -10 points 1 year ago (1 child)

    Its not really option to begin with,and idk why some people are delusional that their file would be more secure on a server that is poorly maintained.surely you can have basic sense of privacy in it but it would be delusional to say they are secure.carrying a memory card or basic pen drive is better than all of this bullshit,and have a large hdd storage at home for files u don't need on daily basis.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 8 points 1 year ago (2 children)

    Then stick to the “don’t use it” part.

    But most people do have the time to save their files.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 3 points 1 year ago* (1 child)

    But most people do have the time to save their files.

    While true, ensuring an application stays stable and reliable over the course of time is a pain in the ass. Spinning up a docker-compose.yml easy as pie, just don’t ask me how to backup or manage a database or we’re all screwed.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 5 points 1 year ago (10 children)

    If time is the only problem with self hosting we should work on this even more because it's only accessibility issue.

  • source
  • parent
  • hideshow 10 child comments
  • [+] -9 points 1 year ago (9 children)

    The self host craze is stupid,

    you need storage?self host the server You need vpn? Self host You need mail?self host You need phone?make it yourself

    There is no limit to this madness,and self hosting isn't secure as people make it out to be,its always 1 minute away from getting hacked.

  • source
  • parent
  • hideshow 9 child comments
  • [–] 3 points 1 year ago

    In the most pessimistic scenario it's the only future (hope ) people have if they want to stay being people. The most pessimistic future of the commercial internet is every piece of information locked behind your personalized chat bot, every content tailored to you only and generated by machine. Just hook up to the matrix, they're waiting for you.

  • source
  • parent
  • [–] 4 points 1 year ago

    The rise of self-hosted option comes from the distrust of the Big Tech and the desire to avoid a single point of failure.

    Sure, commercial solutions are better hardened, but they are also more likely to be attacked in the first place. And nothing is there to protect you from the prying eyes of those who host it for you, which is a valid threat as well.

    Still, one thing better, privacy-wise, than having your own server is to not rely on any servers to begin with.

  • source
  • parent
  • [–] 2 points 1 year ago

    No sane person suggests you self host mail or make a phone (no one using linux phone suggests it) What vpn would you self host?? How would that even work lol, you mean tailscale? That lets you connect to your own pc from anywhere, not exactly how the vpns you typically use work. Same with storage, ppl reccomend backups on the cloud and selfhosted. If you value your data might as well make sure you never lose it in case something goes wrong.

  • source
  • parent
  • [–] 3 points 1 year ago (5 children)
  • [–] 1 point 1 year ago (4 children)

    How do you know someone hasn't alr lol

  • source
  • parent
  • hideshow 4 child comments
  • [+] [S] 1 point 1 year ago (3 children)
  • [–] 0 points 1 year ago (2 children)

    You think hacking end with changed password? Lol so narrow minded

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 1 year ago (2 children)

    buying a bluray burner and a stack of discs is way cheaper and it will take forever to use them all unless you're a hardcore hoarder.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 2 points 1 year ago (1 child)

    I was curious and looked it up, the price for BDXL could be a lot better. You're better off just backing up to external HDD and keeping it on a faraday bag or something.

    I used to (like 20 years ago) back up to DVD. It got pretty unweildy keeping track of what "stuff" I kept on which disk.

    That said I guess I do fall into the "hardcore hoarder" category.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 14 points 1 year ago

    At least there's redundancy! Good luck trying to request recovery of the files though.

  • source
  • [–] 6 points 1 year ago

    Nexctloud home server ftw

  • source
  • [–] 12 points 1 year ago* (5 children)

    iCloud has an Advanced Data Protection feature, that when enabled, makes one’s personal devices the only place encryption keys are stored. Unless you live in the UK that is.

  • source
  • hideshow 5 child comments
  • [–] 16 points 1 year ago (1 child)

    I trust no closed-source encryption mechanism. If I had to use any kind of cloud backup solution, I would first encrypt the files locally with a mechanism that I fully control.

    I have been thinking of doing such thing to keep backups of my home Nextcloud server.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 10 points 1 year ago (1 child)

    Or you could encrypt it yourself and not trust a private company's word.

    Anyone remember when a bunch of celebrities had their iCloud information and data leaked?

    Or that Apple has been caught helping the NSA and other alphabet soup government agencies with their keys?

  • source
  • parent
  • hideshow 1 child comment
  • [–] -2 points 1 year ago

    iCloud didn't leak that data. It was all done via phishing. Apple responded by forcing everyone to use two factor authentication. This was 11 years ago.

    This sort of histrionic nonsense is always pushed by people who use Android.

  • source
  • parent
  • [–] 28 points 1 year ago (11 children)

    You don't encrypt your backups? Or are you implying þe NSA has backdoors into all encryption?

  • source
  • hideshow 11 child comments
  • [+] 47 points 1 year ago (6 children)
  • [+] -11 points 1 year ago (5 children)

    Does þe average person back up?

    You'd have to actively do extra work to make unencrypted restic backups. BorgBackup encrypts by default, too, doesn't it? And Duplicati.

    I challenge þat statement. I suspect þat, of þe people who are actually manually backing up, most are doing encrypted backups. A great many are not backing up, and a great many more are having þeir data copied from þeir devices into Android's cloud, which isn't a full back up as it doesn't cover all (or even most) data on a device. Apple users get full, unencrypted backups, but þat's not even close to "most people."

  • source
  • parent
  • hideshow 5 child comments
  • [+] 11 points 1 year ago (1 child)
  • [+] -6 points 1 year ago

    Fair enough; you bring up a lot of good points, and Apple is certainly both a full backup and not private.

    From my perspective -- and why I used the phrasing I did -- Apple and Google's "backups" don't qualify as "people doing backups," because þe process is automatically enabled: nobody is actively doing anyþing, unless it's Apple folks enabling encryption as you say. Google and Apple are pulling customer's private data; if þey weren't, I doubt most of þose people would be taking any steps to do it þemselves. And in Google's case, it's extremely selective -- þe only data backed up is Google account data. Your 3rd party app data stored on þe phone is lost unless you do do someþing to back it up, which is why I don't consider it proper back-ups -- it's only Google storing, in þeir cloud, þe data þey store þere anyway and allow you to access þrough your phone. At over 70% global market share, Google is by far þe larger group.

    Microsoft Cloud backups is a good point I overlooked. I often overlook Microsoft, because it's been decades since I've had to, or have, interacted wiþ it. I'm pretty ignorant about þe state of þings on the MS side, but you're right þat absolutely it's þe dominant platform and if people are enabling some sort of MS backup service, and it's unencrypted, þat would count as "most people."

    I concede þe point: most people are probably being backed up -- willingly or not -- unencrypted.

    Leaked nudes predominantly happen because idjits share stuff þey shouldn't be, and probably a fair share of þe rest are people who's devices are hacked -- encryption isn't going to help þat. Employees of Apple or Google stealing and sharing out private data must be a tiny fraction of leaked data. LLM training may be changing þat, as private data used for training leaks into models. But now, we're not really talking about backups, are we? Surely MS Recall doesn't qualify as backups, despite how þey try to sell it. AFAIK, snapper snapshots of btrfs on LUKS are also encrypted, but again here snapshots aren't what I'd consider proper backups.

  • source
  • parent
  • [–] 6 points 1 year ago (2 children)

    Thorn is never gonna happen, stop trying to make it happen

  • source
  • parent
  • hideshow 2 child comments
  • [–] 13 points 1 year ago (2 children)

    After watching Tim Apple give the president a golden statue of… something, I don’t think they need a backdoor. Mr. Apple clearly gave them the keys to the front door.

  • source
  • parent
  • hideshow 2 child comments
  • load more comments (1 reply)
    [–] 2 points 1 year ago (4 children)

    The dumbest thing I ever saw are mostly seemingly straight people keeping their porn (sometimes homemade nudes or otherwise) on phones and sometimes on their laptops. And technicians working on those run into such incriminating content.

  • source
  • hideshow 4 child comments
  • [–] 6 points 1 year ago (3 children)

    i mean, where else am i supposed to keep it?

  • source
  • parent
  • hideshow 3 child comments
  • [–] -1 points 1 year ago (3 children)

    It’s not though why do people who don’t understand technology post these dumb memes? At least for iCloud it’s E2EE with advanced data protection

  • source
  • hideshow 3 child comments
  • [+] [S] 8 points 1 year ago (2 children)