top | item 37707341

(no title)

jansenmac | 2 years ago

I think this article is over the top. You don't lose control of your data if you store it, let's say, on S3. Use encryption if you wanna be safe.

You can write a similar article about storing data on a local system. It can get stolen, it can get hacked (ransomware). If you delete a file from your local drive there may be still data on disk. Software and OS often ping home and may read along. To think you have control if not in the cloud is an illusion.

Sure, cloud services have different security concerns but to think that it is uncontrollable is just a step to far for me. Also note that there a lot of different cloud services. A lot of privacy concerns have been related to SaaS. To think that you lose control of your data at the moment when using dropbox or S3, start a container (or an enclave),is just not realistic.

discuss

order

shepherdjerred|2 years ago

I think this is a great point. The primitives that cloud providers have are pretty good. I wish that there was some way to federate data storage, e.g. I provide third-party services an S3 bucket where they can store any data related to my account. I grant them access to read/write just data related to their service, and I can revoke it at any time.

For example, with YouTube, my account credentials, settings, watch history, uploaded videos, would all be stored in an S3 (or S3 compatible) bucket that I allow YouTube access to. If I ever want to view my data, I can. If I ever want to revoke access, I can do that too. If YouTube gets hacked my data would still be safe (depending on the attack of course), since it's all in S3. If S3 gets hacked I'm still safe as long as there is encryption at rest.

I know that there will be some tradeoffs, e.g. data locality, pricing, etc., but I feel like such a model would work so well. Taking the idea one step further: sell a plug-and-play consumer server that hosts the S3 storage. A consumer would purchase some off-the-shelf box, plug it in, and use a device they physically control to host all of their online data. This would require things like IPv6 to be more widely adopted, and for upload speeds to increase, but it would solve so many privacy issues.

endigma|2 years ago

I think this is sort of what spacedrive does

robador|2 years ago

This is a great idea!