• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

thus far i've been avoiding the cloud. Not secure, right?

R

readymix

Senior member
or is it? well, lately I have been thinking of sending an encrypted system image up the OneDrive. Am I nuts? Would you do it, anyone?
 
Its probably just as secure as any kind of web utility that you have been using for the last decade, like webmail, in the worst case. When done correctly it can be very secure.
 
If you're encrypting your data with reliable encryption and a very strong password then i would say it's safe enough.

Even if you use SpiderOak, you are still relying on their encryption. Encrypting your own stuff and the uploading to OneDrive would be the same thing provided you use a vetted program and a very strong password.

I currently store my data offsite on Box.com, all my data is encrypted in some way before it's uploaded to the server.
 
So far Ive been fairly impressed with www.tresorit.com. No need to encrypt anything before putting it up because the system is encrypted end to end. It has sharing ability with other Tresorit users as well (kind of like Sharefile I suppose).

Been using it well over a year now. They also have a bounty up right on their main page, if you can break into their security, you get $50,000. No ones been able to yet. It says it took the brunt of 900 different hackers from 45 countries and no one could break it.

If anyone wants to try tresorit, I'd appreciate the referral space =)

https://register.tresorit.com/download?mode=1&ref=wvZwJn
 
Huge generalization.

There's different types of Cloud systems and different ways of setting them up securely and non-securely, to answer a different but related question "Can you set up cloud services securely?" The answer is Yes, at least as securely as any other computer system.
 
Done. sent up a 19 GB image to the OneDrive in 6 1/2 hours that needed to split it into 2 GB portions because of onedrive limitations. to use a metaphor, it's the takeoffs and landings that worry me, once there in it's encrypted form i', not to worried about it, much. with sufficient free gigabytes it'll be onedrive for the next year. more digital bs on the way too, I'm getting the convenience.
 
I tried cloud storage when it was still young. Unless, you have a ethernet connection with 1GB down, I fail to see the practical use of cloud storage. Storage encryption isn't secure. Data can be decrypted. If the closure of the TruCrypt project isn't a sign enough to show that all encrypted data is vulnerable, then I suggest you look into rainbow tables. The best method of storage is on a hard disk that is located at a different geographical location. The hard disk should be kept offline.
 
Vanth said:
I tried cloud storage when it was still young. Unless, you have a ethernet connection with 1GB down, I fail to see the practical use of cloud storage. Storage encryption isn't secure. Data can be decrypted. If the closure of the TruCrypt project isn't a sign enough to show that all encrypted data is vulnerable, then I suggest you look into rainbow tables. The best method of storage is on a hard disk that is located at a different geographical location. The hard disk should be kept offline.
Click to expand...

can't argue with that. I did download the image I sent up and restored to a vm. the whole process took 2 hrs. I can live with that but sending it up with my theoretical upload speed of about 5 MB/s and onedrive's acceptance at about 3 MB/s won't cut if I intend to keep it current and growing with incremental or differentials. whereas I could forget about it and have it be practically useless to me in 6 months. you're right, offsite & offline.
 
Vanth said:
I tried cloud storage when it was still young. Unless, you have a ethernet connection with 1GB down, I fail to see the practical use of cloud storage. Storage encryption isn't secure. Data can be decrypted. If the closure of the TruCrypt project isn't a sign enough to show that all encrypted data is vulnerable, then I suggest you look into rainbow tables. The best method of storage is on a hard disk that is located at a different geographical location. The hard disk should be kept offline.
Click to expand...

It depends on what you want to store, for how long, how often you want to access it and a whole range of other things. It can be useful, as a sys-ad I'm used to throwing backups into AWS's cloud storage (S3) which is a really great backup method.

You need to be careful when using encryption provided by someone else, often times they know and store the encryption keys and can be compelled by law enforcement to divulge them.

The closure of TrueCrypt wasn't due to insecurity, no one has actually brought any bugs with the system to light, the code audit was finished recently and there's no major bug that effect the strength of the encryption. The developers list it as "unsafe" since there may be bugs in the code and they're not going to maintain the code base anymore, if anyone finds a specific problem with TrueCrypt we'll all know about it pretty quickly.

Rainbow tables are just precomputed time/memory trade offs, they only pose a threat to encryption with weak passwords, rainbow tables generally speaking have some scope such as they're computed for passwords up to a certain length and certain character sets. Encrytpion is perfectly safe unless you pick a weak password which are short and/or use small character sets, or the software has bugs or backdoors.

Truecrypt isn't the only encryption technology either, there's plenty of others to choose from
 
Tinfoil hat time:
One thing you should consider is that once the data is out of your hands it could be potentially in anyones for any length of time, and something that has strong encryption now may be trivial to break in 10 years time. It may be worth considering how long you want the data to be safe for.

The effectiveness of rainbow tables can be massively offset with the use of salted passwords and staying away from MD5 and SHA1 hashing
 
Not secure. Even encryption is not secure. To back-up your files I suggest external hard drive and if you have sensitive information in it, use winrar and put strong password on your files.
 
You must log in or register to reply here.

TRENDING THREADS

Back
Top