Re: [qubes-users] Encfs + Dropbox: How to keep your cloud files secure?!

2016-09-24 Thread mara . kuenster
Am Sonntag, 18. September 2016 04:52:52 UTC+2 schrieb rac...@gmail.com: > > So for me, EncFS seems the way to go > > I looked into using EncFS with Dropbox, but from what reading I did it seemed > that EncFS was (1) old and not well maintained and (2) insecure whenever an > attacker can see more

Re: [qubes-users] Encfs + Dropbox: How to keep your cloud files secure?!

2016-09-17 Thread rac9876
> So for me, EncFS seems the way to go I looked into using EncFS with Dropbox, but from what reading I did it seemed that EncFS was (1) old and not well maintained and (2) insecure whenever an attacker can see more than one version of the same file (that is, see the same file before and after

Re: [qubes-users] Encfs + Dropbox: How to keep your cloud files secure?!

2016-09-16 Thread Andrew David Wong
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 2016-09-15 14:45, mara.kuens...@gmail.com wrote: > Hi, > > I just installed Qubes OS and I feel its freakin awesome! > > I am trying to set it up the way I want and one thing on my list is having a > dropbox vm that provides simply just the clo

Re: [qubes-users] Encfs + Dropbox: How to keep your cloud files secure?!

2016-09-16 Thread mara . kuenster
Am Freitag, 16. September 2016 20:11:48 UTC+2 schrieb Chris Laprise: > On 09/16/2016 09:58 AM, mara.kuens...@gmail.com wrote: > > Am Freitag, 16. September 2016 09:52:40 UTC+2 schrieb Drew White: > >> If they can get access, whether encrypted or not, it means it's insecure. > >> > >> Encryption jus

Re: [qubes-users] Encfs + Dropbox: How to keep your cloud files secure?!

2016-09-16 Thread Chris Laprise
On 09/16/2016 09:58 AM, mara.kuens...@gmail.com wrote: Am Freitag, 16. September 2016 09:52:40 UTC+2 schrieb Drew White: If they can get access, whether encrypted or not, it means it's insecure. Encryption just takes time to break. If you have encrypted files, encrypted with a STRONG password

Re: [qubes-users] Encfs + Dropbox: How to keep your cloud files secure?!

2016-09-16 Thread mara . kuenster
Am Freitag, 16. September 2016 09:27:26 UTC+2 schrieb Raphael Susewind: > IMHO the safest option is indeed to use a split-dm kind of approach, as > suggested before: create a loopback file in the dropbox VM, expose this > via qvm-block to your working VM where you then do all the encryption > (usin

Re: [qubes-users] Encfs + Dropbox: How to keep your cloud files secure?!

2016-09-16 Thread mara . kuenster
Am Freitag, 16. September 2016 09:52:40 UTC+2 schrieb Drew White: > If they can get access, whether encrypted or not, it means it's insecure. > > Encryption just takes time to break. > > If you have encrypted files, encrypted with a STRONG password THEN a 2048 bit > cypher, THEN it will probably

Re: [qubes-users] Encfs + Dropbox: How to keep your cloud files secure?!

2016-09-16 Thread Drew White
If they can get access, whether encrypted or not, it means it's insecure. Encryption just takes time to break. If you have encrypted files, encrypted with a STRONG password THEN a 2048 bit cypher, THEN it will probably take about 6 months to decypher it and get the data out. -- You received t

Re: [qubes-users] Encfs + Dropbox: How to keep your cloud files secure?!

2016-09-16 Thread Drew White
On Friday, 16 September 2016 16:37:47 UTC+10, mara.k...@gmail.com wrote: > @Chris > > Thanks I will think about this block-level approach. > > @Drew > > I don't agree... Storing encrypted files on dropbox IS secure in the sense > that nobody in the world will be able to decrypt them (as long a

Re: [qubes-users] Encfs + Dropbox: How to keep your cloud files secure?!

2016-09-16 Thread Raphael Susewind
IMHO the safest option is indeed to use a split-dm kind of approach, as suggested before: create a loopback file in the dropbox VM, expose this via qvm-block to your working VM where you then do all the encryption (using standard LUKS) and can either mount the thing right there or - for extra secur

Re: [qubes-users] Encfs + Dropbox: How to keep your cloud files secure?!

2016-09-16 Thread mara . kuenster
PS: SSH alone is of course not very ideal, because this could mean I am running rsync of the dropbox qube. Instead I could use SSHFS to mount the dropbox qube's folder in encfs and then use the rsync of the encfs qube to sync the files via SSHFS. This is like super indirect, but probably safer?!

Re: [qubes-users] Encfs + Dropbox: How to keep your cloud files secure?!

2016-09-16 Thread mara . kuenster
> > Hi, > > > > I just installed Qubes OS and I feel its freakin awesome! > > > > I am trying to set it up the way I want and one thing on my list is having > > a dropbox vm that provides simply just the cloud storage... I would like to > > run the actual encryption on a different qube because I

Re: [qubes-users] Encfs + Dropbox: How to keep your cloud files secure?!

2016-09-15 Thread mara . kuenster
@Chris Thanks I will think about this block-level approach. @Drew I don't agree... Storing encrypted files on dropbox IS secure in the sense that nobody in the world will be able to decrypt them (as long as the encryption step is not exposed to the dropbox process, which might be compromised).

Re: [qubes-users] Encfs + Dropbox: How to keep your cloud files secure?!

2016-09-15 Thread Chris Laprise
On 09/15/2016 05:45 PM, mara.kuens...@gmail.com wrote: Hi, I just installed Qubes OS and I feel its freakin awesome! I am trying to set it up the way I want and one thing on my list is having a dropbox vm that provides simply just the cloud storage... I would like to run the actual encryption

[qubes-users] Encfs + Dropbox: How to keep your cloud files secure?!

2016-09-15 Thread mara . kuenster
Hi, I just installed Qubes OS and I feel its freakin awesome! I am trying to set it up the way I want and one thing on my list is having a dropbox vm that provides simply just the cloud storage... I would like to run the actual encryption on a different qube because I dont at all trust dropbox.