FileRock
Infrastructure
file sync and backup
SHOW HN2013
How HN took it
4 positive, 8 neutral or asking, 0 mixed, 5 critical, out of 17 comments about the project. Thread score -0.12.
Privacy: 4 for, 3 againstDocs: 0 for, 1 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Open source client allows verifying encryption claims
From 2 comments
On the contrary. As a user of a service the client is the only piece that I really care about wrt data security. If I can verify that the client isn't secretly uploading…
luser001 on HNBasically, yes, that's the point. Publishing the source code of the client allows the users to be sure that FileRock (Client) isn't "secretly uploading encryption keys to the…
marcodb on HN
Objections
Sync performance is likely weaker than Dropbox
From 1 comment
Good question, difficult answer. We are doing our best. So far, the performance and usage-of-resources are not the fields where we put the most of our effort. Additionally, there…
n0on3 on HN
Sending PBKDF2 output instead of password raises authentication concerns
From 2 comments
i have a question about their authentication process as described at http://blog.filerock.com/2012/06/filerock-security-overview/ they say that they don't send the password over…
andrewcooke on HNI haven't looked, but assuming they do TLS like everyone else and they haven't provided perfect forward security, then sending the PBKDF2 hash over the wire is still a weakness.…
darkarmani on HN
Some cipher suites lack perfect forward secrecy
From 1 comment
you might want to look at this ( https://news.ycombinator.com/item?id=5033540 ) comment on why the PBKDF2 is sent for the authentication rather than the password. As far as…
n0on3 on HN
Requests
Increase PBKDF2 iterations and add cost parameter
From 1 comment
You'd probably want to bump 1000 iterations of PBKDF2 to something like 100000 in the next version. Better: include cost parameter in key format, and calculate the number of…
dchest on HN
Mobile clients
From 1 comment
1) Where is your pricing info? 2) Do you have mobile clients? 3) What makes this better than encfs on top of dropbox?
shtylman on HN
Support for LAN file sync
From 1 comment
Good question, difficult answer. We are doing our best. So far, the performance and usage-of-resources are not the fields where we put the most of our effort. Additionally, there…
n0on3 on HN
Questions
How does it differ from Least Authority and encfs on Dropbox
From 2 comments
So how do you differentiate your service from Least Authority [0]? [0] https://leastauthority.com/
Benferhat on HN1) Where is your pricing info? 2) Do you have mobile clients? 3) What makes this better than encfs on top of dropbox?
shtylman on HN
Pricing details
From 1 comment
1) Where is your pricing info? 2) Do you have mobile clients? 3) What makes this better than encfs on top of dropbox?
shtylman on HN
Alternatives named
Tahoe-LAFS
From 1 comment
If you absolutely need server stuff, Tahoe-LAFS [0] looks good. The mailing list is great[1-2]. An interesting service uses it, Least Authority[3] offers Tahoe-LAFS-on-S3[4]. It…
Benferhat on HN
ownCloud
From 1 comment
i can really recommend owncloud if you want to run something like this on your own servers - works like a charm. http://owncloud.org
mars on HN
SpiderOak
From 1 comment
SpiderOak (https://spideroak.com) is a zero-knowledge focused and secure backup service that you may want to take a look at.
SODaniel on HN
git-annex
From 1 comment
It's not quite the same, but I've grown very fond of git-annex[1], which is also free software under the same license (GPL 3). With git-annex, it's very simple to create your own…
chimeracoder on HN
Seafile
From 1 comment
i think - from reading descriptions/opinions - that the more recent 'seafile' could be even better.
johnsea on HN