Eskating cyclist, gamer and enjoyer of anime. Probably an artist. Also I code sometimes, pretty much just to mod titanfall 2 tho.

Introverted, yet I enjoy discussion to a fault.

  • 49 Posts
  • 2.37K Comments
Joined 3 years ago
cake
Cake day: June 13th, 2023

help-circle
  • Sure they can. How else do they enable providing access to the content without the user password?

    The data is secured against unauthorized access, but unlike zero-knowledge setups where the chain of custody is fully within user control, the user is not the only one authorized. And even if you are supposed to be, you cannot ensure that you actually are.

    OF-FUCKING-COURSE the physical drives, and network traffic are encrypted. That’s how you prevent unauthorized physical access or sniffing of data in-flight. That’s nothing special.

    But encryption is not some kind of magic thing that just automatically means anyone who shouldn’t have access to the data, doesn’t.

    For that to actually be the case, you need solid opsec and known chain of custody. Ways of doing things that means the data stays encrypted end-to-end.

    The personal backup plan doesn’t have that.


  • With what?

    That self hosting admins on lemmy probably care about their backups not being accessible to third parties?

    I don’t think you can claim that they wouldn’t.

    You can claim that YOU don’t mind. But that’s a sample size of one. And I’m not denying there are people who don’t care.

    I just don’t think they’re the type to be self-hosting in the first place.

    And that still doesn’t answer why the fuck you set out on this series of “well achuallys”?

    It seems to me, you’re still looking for something to correct me on.




  • No shit. But encryption isn’t the same as zero-knowledge. Where by the time they handle the data in any way whatsoever, it’s already encrypted, by you.

    Do you not know what zero-knowledge means? Or are you so focused on my mentioning they’ll ship data to you physically that what I actually said went over your head?

    From the page you just linked:

    1. Implement encryption transparently so users don’t have to deal with it

    2. Allow users to change their password without re-encrypting their data

    3. In business environments, allow IT access to data without the user’s password

    It’s not zero-knowledge!











  • Recently helped someone get set up with backblaze B2 using Kopia, which turned out fairly affordable. It compresses and de-duplicates leading to very little storage use, and it encrypts so that Backblaze can’t read the data.

    Kopia connects to it directly. To restore, you just install Kopia again and enter the same connection credentials to access the backup repository.

    My personal solution is a second NAS off-site, which periodically wakes up and connects to mine via VPN, during that window Kopia is set to update my backups.

    Kopia figures out what parts of the filesystem has changed very quickly, and only those changes are transferred over during each update.







  • It’s not “caching”. Fediverse instances mirror the content. It doesn’t get uncached as it gets old. If it did, pulling up a feed of all content on the fediverse for a given date or search, would require your server firing off an http request to every other server on the whole network, waiting for a reply, and then parsing those replies.

    That’s not workable. So instead servers mirror, and only sync updates, and only for stuff that the other server has followers/subscribers.

    To see “all” content without someone on an instance following said content, every instance would have to mirror the content of every other instance. Again, that’s not workable.

    You don’t want to have to download the entire fediverse just get your small single-user istance working.