[{"data":1,"prerenderedAt":316},["ShallowReactive",2],{"project-5032470":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":10,"maker":11,"posted_at":12,"year":13,"points":14,"comments":15,"rank_in_year":16,"shown_in_year":17,"top":18,"tier":19,"category":20,"subcategory":21,"format":22,"keywords":23,"reception":28,"sentiment":29,"stance_mix":30,"scored_comments":35,"aspects":36,"strip":44,"post_text":45,"what":46,"said":88,"maker_in_thread":186,"shape":195,"grid":200,"attempts":279,"same_week":280,"maker_shows":41,"maker_hidden":308,"reader_version":309,"card":310},"5032470","FileRock","A Secure Dropbox Clone, goes Open Source","title","Show HN: FileRock, a Secure Dropbox Clone, goes Open Source","http:\u002F\u002Fblog.filerock.com\u002F2012\u002F12\u002Fwere-going-open-source\u002F","blog.filerock.com","n0on3",1357754755,2013,97,34,233,1739,14,"notable","infrastructure","file sync and backup","desktop_app",[24,25,26,27],"dropbox alternative","client-side encryption","file sync","open source","mixed",-0.123,{"positive":31,"neutral":32,"mixed":33,"critical":34},4,8,0,5,17,{"privacy":37,"idea":39,"docs":40,"performance":42,"pricing":43},{"positive":31,"critical":38},3,{"positive":33,"critical":33},{"positive":33,"critical":41},1,{"positive":33,"critical":33},{"positive":33,"critical":33},[38,38,38,33,34,41,33,33,33,41,33,41,41,38,33,33,33,33,33,38,34,41,33,34,33,33,33,38,33,33,33,34,38,38],null,{"problem":47,"audience":57,"pricing":66,"motivation":74,"time_to_build":45,"stack":84,"openness":85,"stage":86,"team_size":87},{"value":48,"source":49,"evidence":50},"Syncing files to cloud storage without trusting the provider with keys or data","maker",[51,54],{"id":52,"by":11,"text":53},"5033540","the point is that in FileRock, several things depend on your password, and some of them must be kept confidential and never sent even to the FileRock servers. You are right, from…",{"id":55,"by":11,"text":56},"5034256","\"[…] You might not trust Companies with your data either, and you shouldn't be forced to in order to store it in the cloud\". That is exactly our goal: we don't like to be forced…",{"value":58,"source":59,"evidence":60},"Users who want zero-knowledge cloud storage","inferred",[61,65],{"id":62,"by":63,"text":64},"5032935","luser001","On the contrary. As a user of a service the client is the only piece that I really care about wrt data security. If I can verify that the client isn't secretly uploading…",{"id":55,"by":11,"text":56},{"value":67,"source":68,"evidence":69},"Private beta; commercial plans planned, 3G free","commenter",[70],{"id":71,"by":72,"text":73},"5036071","FileRockDA","1) We're still in private beta, we hope to publish commercial offers soon. You will get 3G free, and there will be different plans if you want more space. If you take part in the…",{"value":75,"source":49,"evidence":76},"Prove security claims by letting users verify the client",[77,80],{"id":78,"by":11,"text":79},"5033646","Apologies if the title of the post is not clear, I should have specified that it was only about the client. You are right, one of our main goals is to prove that our security is…",{"id":81,"by":82,"text":83},"5033936","marcodb","Basically, yes, that's the point. Publishing the source code of the client allows the users to be sure that FileRock (Client) isn't \"secretly uploading encryption keys to the…",[],"open_source","beta","team",{"praise":89,"objections":95,"requests":119,"questions":138,"alternatives":151},[90],{"value":91,"source":68,"evidence":92},"Open source client allows verifying encryption claims",[93,94],{"id":62,"by":63,"text":64},{"id":81,"by":82,"text":83},[96,102,113],{"value":97,"source":49,"evidence":98},"Sync performance is likely weaker than Dropbox",[99],{"id":100,"by":11,"text":101},"5036011","Good question, difficult answer. We are doing our best. So far, the performance and usage-of-resources are not the fields where we put the most of our effort. Additionally, there…",{"value":103,"source":68,"evidence":104},"Sending PBKDF2 output instead of password raises authentication concerns",[105,109],{"id":106,"by":107,"text":108},"5033255","andrewcooke","i have a question about their authentication process as described at http:\u002F\u002Fblog.filerock.com\u002F2012\u002F06\u002Ffilerock-security-overview\u002F they say that they don't send the password over…",{"id":110,"by":111,"text":112},"5033864","darkarmani","I haven't looked, but assuming they do TLS like everyone else and they haven't provided perfect forward security, then sending the PBKDF2 hash over the wire is still a weakness.…",{"value":114,"source":49,"evidence":115},"Some cipher suites lack perfect forward secrecy",[116],{"id":117,"by":11,"text":118},"5034088","you might want to look at this ( https:\u002F\u002Fnews.ycombinator.com\u002Fitem?id=5033540 ) comment on why the PBKDF2 is sent for the authentication rather than the password. As far as…",[120,127,134],{"value":121,"source":68,"evidence":122},"Increase PBKDF2 iterations and add cost parameter",[123],{"id":124,"by":125,"text":126},"5033211","dchest","You'd probably want to bump 1000 iterations of PBKDF2 to something like 100000 in the next version. Better: include cost parameter in key format, and calculate the number of…",{"value":128,"source":68,"evidence":129},"Mobile clients",[130],{"id":131,"by":132,"text":133},"5034295","shtylman","1) Where is your pricing info? 2) Do you have mobile clients? 3) What makes this better than encfs on top of dropbox?",{"value":135,"source":68,"evidence":136},"Support for LAN file sync",[137],{"id":100,"by":11,"text":101},[139,147],{"value":140,"source":68,"evidence":141},"How does it differ from Least Authority and encfs on Dropbox",[142,146],{"id":143,"by":144,"text":145},"5034474","Benferhat","So how do you differentiate your service from Least Authority [0]? [0] https:\u002F\u002Fleastauthority.com\u002F",{"id":131,"by":132,"text":133},{"value":148,"source":68,"evidence":149},"Pricing details",[150],{"id":131,"by":132,"text":133},[152,158,165,172,179],{"value":153,"source":68,"evidence":154},"Tahoe-LAFS",[155],{"id":156,"by":144,"text":157},"5032922","If you absolutely need server stuff, Tahoe-LAFS [0] looks good. The mailing list is great[1-2]. An interesting service uses it, Least Authority[3] offers Tahoe-LAFS-on-S3[4]. It…",{"value":159,"source":68,"evidence":160},"ownCloud",[161],{"id":162,"by":163,"text":164},"5033570","mars","i can really recommend owncloud if you want to run something like this on your own servers - works like a charm. http:\u002F\u002Fowncloud.org",{"value":166,"source":68,"evidence":167},"SpiderOak",[168],{"id":169,"by":170,"text":171},"5035235","SODaniel","SpiderOak (https:\u002F\u002Fspideroak.com) is a zero-knowledge focused and secure backup service that you may want to take a look at.",{"value":173,"source":68,"evidence":174},"git-annex",[175],{"id":176,"by":177,"text":178},"5034740","chimeracoder","It's not quite the same, but I've grown very fond of git-annex[1], which is also free software under the same license (GPL 3). With git-annex, it's very simple to create your own…",{"value":180,"source":68,"evidence":181},"Seafile",[182],{"id":183,"by":184,"text":185},"5034315","johnsea","i think - from reading descriptions\u002Fopinions - that the more recent 'seafile' could be even better.",{"comments":32,"answered":38,"key":187},[188,189,192],{"id":52,"text":53},{"id":190,"text":191},"5033456","good point. For different things we kept it quite simple, but soon we are certainly going towards these refinements and your suggestion sounds pretty good imho",{"id":193,"text":194},"5033056","Just in case the slashdot effect strikes, direct link to the source code on GitHub is: https:\u002F\u002Fgithub.com\u002Ffilerock\u002FFileRock-Client",{"commenters":196,"max_depth":197,"maker_replies":32,"first_comment_mins":198,"lifespan_hours":199},23,6,43,50,[201,203,206,209,210,213,215,216,219,221,222,224,226,230,233,236,238,242,244,245,247,248,252,254,255,256,257,261,265,267,269,272,275,277],[106,33,38,202,107,33],"project\u002Fneutral\u002Fprivacy",[204,33,38,202,205,33],"5033447","notimetorelax",[207,33,38,202,208,33],"5033499","evv",[52,33,33,202,11,41],[211,33,34,212,107,33],"5033814","maker\u002Fpositive\u002Fprivacy",[124,41,41,214,125,33],"project\u002Fcritical\u002Fprivacy",[190,41,33,212,11,41],[176,217,33,218,177,33],2,"other\u002Fneutral\u002Fnone",[193,38,33,220,11,41],"project\u002Fneutral\u002Fdocs",[110,31,41,214,111,33],[117,31,33,223,11,41],"maker\u002Fneutral\u002Fprivacy",[225,31,41,214,111,33],"5037822",[227,34,41,228,229,33],"5032712","project\u002Fcritical\u002Fnone","dz0ny",[231,34,38,202,232,33],"5032832","parley",[234,34,33,235,11,41],"5032869","project\u002Fpositive\u002Fprivacy",[156,34,33,237,144,33],"other\u002Fneutral\u002Fprivacy",[239,34,33,240,241,33],"5033867","other\u002Fcritical\u002Fprivacy","aw3c2",[243,34,33,237,144,33],"5034150",[55,34,33,212,11,41],[143,34,38,246,144,33],"maker\u002Fneutral\u002Fidea",[62,34,34,235,63,33],[249,34,41,250,251,33],"5033386","project\u002Fcritical\u002Fdocs","lectrick",[78,34,33,253,11,41],"maker\u002Fpositive\u002Fdocs",[81,34,34,235,82,33],[162,34,33,218,163,33],[183,34,33,218,184,33],[258,34,33,259,260,33],"5035006","other\u002Fcritical\u002Fperformance","sergiosgc",[262,197,38,263,264,33],"5034265","project\u002Fneutral\u002Fperformance","StavrosK",[100,197,33,266,11,41],"maker\u002Fmixed\u002Fperformance",[169,268,33,218,170,33],7,[270,268,33,237,271,33],"5036016","jivemind",[273,268,34,235,274,33],"5044728","clebio",[131,32,38,276,132,33],"project\u002Fneutral\u002Fpricing",[71,32,38,278,72,33],"maker\u002Fneutral\u002Fpricing",[],[281,285,290,295,299,304],{"id":282,"name":283,"points":16,"category":284},"5022472","Pitchbox","web_saas",{"id":286,"name":287,"points":288,"category":289},"5003672","phrase.it",225,"creative",{"id":291,"name":292,"points":293,"category":294},"5012920","gcsms",121,"dev_tools",{"id":296,"name":297,"points":298,"category":284},"5026802","Balanced Payouts",91,{"id":300,"name":301,"points":302,"category":303},"5020577","Slowpal",63,"finance_crypto",{"id":305,"name":306,"points":307,"category":289},"5002050","Papyrus",58,false,"v2",{"id":311,"name":5,"line":6,"ai":308,"cat":20,"year":13,"points":14,"comments":15,"rec":28,"s":312,"top":18,"kw":313,"maker":11,"domain":10,"tier":19,"attempts":33,"strip":314,"url":9,"mix":315,"praise":91,"objection":97,"sub":21},5032470,-0.12,[24,25,26,27],"3330510001011300000351050003000533",[31,32,33,34],1794036503187]