Yeah, you wonder why they don't open-source their front-end client code so that it can be easily audited to make sure the encryption is done right. It would go a long way to increasing some users' peace-of-mind. Then again, since it's all javascript, you could probably look at the html source, but it's probably minified and obfuscated.
It's not JS, it's Python, AFAIK. I talked to their CTO (I think it was the CTO) about it, who said that it was a big priority with them, but they couldn't open-source it yet. It would do a lot for my peace of mind, though, and I wouldn't look for alternate solutions if everything was okay with it.
Oh, so it's not a web-based client. Sorry, I confused it with Mega. To be honest, why not roll your own alternate solution? This one here is just a frontend to S3 and glacier. It shouldn't be too difficult to write a script that takes all the files in a directory, encrypts it with GPG or OpenSSL, and then uploads it to glacier.
The problem is all the diffing and stuff. You can get half a terabyte of storage for $3/mo, so glacier support isn't necessary, but getting accurate diffing is hard (there's a reason why rdiff-backup is as large as it is, and duplicating the entire thing doesn't make much sense).
I would much prefer to write a small layer to glue EncFS and rdiff-backup together (and I started doing just that: https://github.com/skorokithakis/encrups), but I haven't managed to find an elegant solution for the directory aggregation yet.
Comments
Yeah, you wonder why they don't open-source their front-end client code so that it can be easily audited to make sure the encryption is done right. It would go a long way to increasing some users' peace-of-mind. Then again, since it's all javascript, you could probably look at the html source, but it's probably minified and obfuscated.
It's not JS, it's Python, AFAIK. I talked to their CTO (I think it was the CTO) about it, who said that it was a big priority with them, but they couldn't open-source it yet. It would do a lot for my peace of mind, though, and I wouldn't look for alternate solutions if everything was okay with it.
Oh, so it's not a web-based client. Sorry, I confused it with Mega. To be honest, why not roll your own alternate solution? This one here is just a frontend to S3 and glacier. It shouldn't be too difficult to write a script that takes all the files in a directory, encrypts it with GPG or OpenSSL, and then uploads it to glacier.
Actually wait, yeah, that's pretty feasible. It seems that glacier pricing is free for low storage volumes. https://aws.amazon.com/glacier/pricing/
The problem is all the diffing and stuff. You can get half a terabyte of storage for $3/mo, so glacier support isn't necessary, but getting accurate diffing is hard (there's a reason why rdiff-backup is as large as it is, and duplicating the entire thing doesn't make much sense).
I would much prefer to write a small layer to glue EncFS and rdiff-backup together (and I started doing just that: https://github.com/skorokithakis/encrups), but I haven't managed to find an elegant solution for the directory aggregation yet.