Ask HN: What encrypted Dropbox alternative do you use?

48 points by networked ↗ HN
Are you happy with it?

46 comments

[ 3.9 ms ] story [ 75.7 ms ] thread
Google Drive, Tarsnap, SpiderOak
Google Drive has built in encryption? Or are you encrypting before uploading?
Keybase. It's a pretty great overall service, with its encrypted virtual file system being just one of them.
+1 for Keybase, with chat, git, and public folders, it really is a great service.
Last time I used it the kbfs required an Internet connection, have things changed?
Least Authority/Tahoe-LAFS

They call it S4, but it's basically a client side encryption front-end for Amazon's S3 for $25/month and unlimited storage.

Resilio sync. It's almost identical to Dropbox except with encryption.

https://www.resilio.com/individuals/

I also use Resilio Sync because it is one of the rare solutions here that provide an iOS client. The app is quite poor compared to the Dropbox app, you can just about use it to open, sync files both ways but that’s it. Also, you cannot share individual files or folders with others.
Dropbox uses encryption.
And also shares your keys with the NSA.
Cryptomator.org inside iCloud. I like it because I'm responsible for the password. There is no password reset feature.

Also a +1 for Keybase.

Spider Oak
+1 Spider Oak "Hive" for dropbox-like functionality
Same. I'm unhappy with how so slow their web interface is but really you shouldn't be using it.
Resilio Sync + encfs, works fine on macos and linux, not sure about windows though.
Cryptomator on top of iCloud and Dropbox. Also Boxcryptor on Dropbox.
why would you trust someone else to encrypt your files? I use dropbox and this makefile

  %.enc:%
    openssl aes-256-cbc -a -salt -in $< -out $@

  %:%.enc
    openssl aes-256-cbc -d -a -in $< -out $@
just not in the shared directory :)
What is going on here? I tried storing that in a file "Makefile" and created a file called 'foo', then did:

    $ make foo.enc
The output was:

    make: Circular Makefile.enc <- Makefile dependency dropped.
    make: Circular foo <- foo.enc dependency dropped.
    openssl aes-256-cbc -a -salt -in foo -out foo.enc
    enter aes-256-cbc encryption password:
After putting in a password it did encrypt the file, but there's a lot of noise in my output, so maybe I'm doing it wrong. Any clues?
well, thats because the rules are for both encrypting and decrypting.

  %.enc:%

  %:%.enc
In one file. So enc -> file -> enc. You can split them out, so encrypt in one makefile and decrypt in another.

  make -f Encrypt foo.enc
  make -f Decrypt foo
but thats been bugging me as well, so here is an all in one

  $E:
    openssl aes-256-cbc -a -salt -in $(patsubst %.enc,%,$@) -out $@

  $D:
    openssl aes-256-cbc -d -a -in $@.enc -out $@

  make E=foo.enc
  make D=foo
use make at your own peril :)
Nextcloud, it's great.
Yunohost makes it easy to implement (done in a few clicks). And yunohost has a really nice github clone (Gogs if you haven't heard of it). Yunohost itself is super easy to get working and even has a raspberry pi version. Debian based:)
Rclone + its encryption + Google Drive business account is the best option I've seen so far. Unlimited for $10/month since they don't enforce limits on single user accounts yet.

Some alternatives I see here and the reason I don't use them:

SpiderOak: I've written extensively about this [0]. TL;DR: It's slow as hell and they're utterly unmotivated to fix it. It's slow enough that I consider it unusable. Fine for one off documents, nothing else.

Syncthing/Resilio/Nextcloud: I'd have to provide my own storage.

Dropbox/AWS/GCP/Azure/Tarsnap/Rsync.net: Too expensive.

[0]: https://news.ycombinator.com/item?id=13306353

Restic to cold Google Cloud Storage, 5€ per Tb.
Google Drive with BitLocker VHDs
I use EncFS with gsutil -m sync to backup encrypted data to the cloud

I dont't trust closed source binaries like Dropbox and others.

borgbackup + rsync.net. I'm very happy.