SpiderOak Blog

Another +1 for Fastmail. Their IMAP migration tool worked flawlessly shifting multi GBs of emails when I made the switch last month (admittedly not from gmail but from a self-hosted Zarafa install). Re: Drive/Photos alternative. For the Drive part, if you just need something in the cloud to backup files to (and optionally share them with other people) I highly recommend https://www.spideroak.com. Have been using them for years without issue and they're the only "cloud backup" provider I know of that takes security and privacy seriously.

I would consider it not safe because it was on of the companies mentioned on the NSA slides. You can still sync your Keepass(x) file with Dropbox if you have a good password (key file is recommended) on the database file. Instead of Dropbox you can also use https://spideroak.com/ They have a really handy program which let you control a lot of things and they are a "zero knowledge" cloud provider, all your data is encrypted. Snowden recommends them: http://www.theguardian.com/technology/2014/jul/17/edward-snowden-dropb… For $12 dollar a month you get 1 TB, which you can use as a safe off-site backup location.

I think Dropbox lost a reasonably large share of its market when the crowd that is both technical and privacy-conscious starting moving to more secure alternatives. I love Dropbox and still have an account, as it has a great user interface and always worked on Linux, however I won't use it for anything that I don't consider "shareable" anymore. I prefer Spideroak [1] for actually saving my important documents. Sure, it may not look as nice, but for zero-knowledge guarantee I'm OK with that. [1] https://spideroak.com/

I've been hoping for Backblaze to launch a "pro"/"enterprise" tier that allowed for this kind of use. Unfortunately (for me) it would appear they prefer to stay within their chosen niche: home user backups. The service I'm aware of that is closest to what you describe is spideroak[1]. Last I used them (years ago) they were a little too slow, and had some other minor kinks -- but might be worth checking out again now. It looks like they've also finally made good on delivering Nimbus.io -- both as source and as a service (as I said, it's been years since I looked at Spideroak...): https://nimbus.io/ https://github.com/SpiderOak/nimbus.io [1] https://spideroak.com/

Sorry, but there's no way I'd allow any cloud service to hold my password vault, and recommending it to end users seems like a colossally bad idea. I'd want at least two layers of different encryption types (generated by distinct software) protecting any such file if it were to be stored in the cloud. That way if one software package or one encryption algorithm were compromised, there would at least be a chance the other layer would protect it. So at the moment I put my vault on my laptop and copy it directly to my phone, but I don't copy it into the cloud, ever. I might consider using something like SpiderOak [1] in conjunction with a Keepass encrypted container, for instance. But I haven't even done that. [1] https://spideroak.com/

I haven't really been following the Dropbox fiasco(s), mostly because I've been so happy over the last year with SpiderOak (https://spideroak.com/). They go out of their way to put you in control of your data. They don't store any passwords whatsoever, encrypt everything, and have a strong zero-knowledge policy.

I won a Spideroak ( http://www.spideroak.com ) plan and have been using it for about a month now. It works, uploads are fast, I can't comment on how easy a restore would be. The only thing that's really annoying is that a search for updated files uses 100% CPU. Other than that I can warmly recommend JungleDisk ( https://www.jungledisk.com/ ), been using it do backup my source code and documents for about a year now without any major problems. I don't even notice it runs anymore. I'm using it with the S3 backend.

For those looking for an alternative to dropbox I can recommend SpiderOak (https://spideroak.com) - Unlimited number of devices (computers) in one account - Slightly cheaper - Windows, Mac and Linux client - 100% Zero-knowledge security and client side encryption key creation. My 5 cent

I do it like this: - Password database in KeePass (the mainline version, not KeePassX or one of the other spinoffs) - Database requires both password and key file to unlock - Key file only lives on a USB thumb drive, which lives on the keychain in my pocket - Database lives in a folder that is auto-synced to my various devices via SpiderOak (https://spideroak.com/) - Password autofill provided by KeeFox (http://keefox.org/) Using a password and a key file provides a "kinda sorta 2FA" solution, since the key file is tied to a physical artifact (the thumb drive, "something I have") while the password provides "something I know." It's not perfect, however, since the key file could theoretically be separated from the thumb drive if someone got ahold of it. A better 2FA solution would be one that incorporates a key that's completely tied to the physical token. However, I haven't found a great consumer-oriented product along those lines yet, despite much looking. The YubiKey is the closest, but after buying two of them and spending hours fighting with them, I eventually gave up trying to make them work; they force a choice between their one-time-password (OATH) implementation, which is theoretically awesome but in practice very finicky, and just using a static password stored on the key, which isn't really any better than my USB stick solution. I chose SpiderOak for syncing the database over alternatives like Dropbox, primarily because SpiderOak appears to actually give a…

Why would someone downvote this comment? If you don’t like spideroak [1] that’s fine but downvoting for an informative comment seems childish. 1: https://spideroak.com/ Another e2e encrypted storage solution is keybase.io.

google recaptcha is a scourge. 90% of the time i'm met with it, i just close the tab and don't use the service. the other 10% is usually something i already use so i can't easily do that. but i hate it so much that i will switch eventually (e.g., https://spideroak.com/ or setting up an instance of https://nextcloud.com/ instead of dropbox).

No love for SpiderOak's Semaphor. It's a secure end-to-end encrypted system. Free for 5 users or less. https://spideroak.com/semaphor/

Great way to comply with GDPR! Also presumably reduces your data management overhead slightly, although it seems you're still storing data on your own systems[1]. This reminds me of SpiderOak's "No Knowledge" claim[2]. [1] https://www.airborn.io/docs/security [2] https://spideroak.com/no-knowledge/

The language Apple uses indicates that your personal data that apple recieves is at least at some point in clear unencrypted form, and that they then choose to encrypt it for cloud storage. The language indicates they could decrypt it if they choose. All of their statements during the San Berdeno Apple vs Gov debate a year ago clarified they had complete access to all cloud based content. There are examples of cloud like services that are able to provide online syncronization and sharing services without being able to access your data, and the language they use is very different. Examples https://send.firefox.com/ https://spideroak.com/ https://protonmail.com/

https://spideroak.com/personal/encryptr You can have this on MacOS, Windows, your smartphone. Great when you only have your phone with you and you need to login somewhere to do stuff.

I believe SpiderOak (https://spideroak.com/) does not auto-update!

Great question. The database work is all done client side. Here's an explanation of the architecture I wrote in 2009: https://spideroak.com/articles/why--how-spideroak-architecture-is-diff…

I use SpideroakONE https://spideroak.com ( even though it's encrypted, I still encrypt it on the cmd before pushing it into the cloud )

I know. It's probably not worth attempting to convince certain people. Not only Encryptr, but even other ones [0]. Oh, and I'm not even remotely affiliated with SpiderOak. [0] https://spideroak.com/solutions

SpiderOak - REMOTE - Full-time - https://spideroak.com Privacy matters. We're a privacy and security-focused cloud services provider looking to flesh out several teams on staff. We are looking for energetic, capable engineers for the following positions: * iOS Developer https://spideroak.com/articles/ios-developer * Android Developer https://spideroak.com/articles/android-developer * JS App Developer https://spideroak.com/articles/javascript-app-developer * Django Developer https://spideroak.com/articles/django-developer

SpiderOak. When I decided I wanted auto-syncing cloud storage, I chose them exactly because of the temp file issue. I ended up also liking their security policies and pricing quite a bit. https://spideroak.com/

Seems cool. I think it's safe to assume that the #1 concern of those unwilling to store their data in "the cloud" is the (valid) fear that service-provider-X has the ability to look at your files. I think it's worth noting that this seems very similar to Spider Oak's zero-knowledge feature (https://spideroak.com/zero-knowledge/), which they implemented a long time ago.

A truecrypt container on Dropbox isn't very ideal either, you'd have to up/download the whole thing instead of just the file you need. I've heard that Spideroak is a better solution. https://spideroak.com/

SpiderOak [1] released (or rather "endorsed") an "open source, 'Zero-Knowledge', cloud-based password manager" called Encryptr [2] as well. [1] https://spideroak.com/ [2] https://github.com/devgeeks/Encryptr

I've been using Spideroak https://spideroak.com/, they push security but only have 2G of free storage and their prices are steeper. But they have a Linux client! Proprietary, but I can never get grive to work right so I use it (hesitantly). Most of my stuff is synced via owncloud, though.

Mediafire also offers 1 TB for $5 (first month is $2.5 or something). https://www.mediafire.com/upgrade/ If you want something with strong security and privacy, there's https://spideroak.com/

For encryption, check out SpiderOak. I used to work with the CEO and know a few of their engineers. The privacy use case is looking stronger and stronger. https://spideroak.com

I really like SpiderOak https://spideroak.com I have mine set to backup every 4 hours. It versions the files as well so you can restore to a previous backup.

This looks a lot like Spideroak (https://spideroak.com/), which incidentally has a white label reseller program… https://spideroak.com/whitelabel/

Hello Alan, I have a quick question for you which might be of interest to others as well: Why isn't SpiderOak open source yet? I've read your FAQ answer[1] on this, however it doesn't really give a concrete explanation, besides "soon" and "licencing concerns" which is definitely disappointing. I currently use my own, EncFS based sync solution, however I'd love to be able to use SpiderOak, or a third party open source application which supported syncing with SpiderOak (if you'd ever consider exposing an API/Protocol which allowed such.) This is the only reason I'm not using your service currently, however I love the concept and hope you'll take it into consideration. It's likely I'm not the only one with similar concerns. [1]: https://spideroak.com/faq/questions/35/why_isnt_spideroak_open_source_…