Text 24196, 66 rader
Skriven 2012-01-01 22:15:25 av David Drummond (3:640/305)
  Kommentar till text 24195 av Alexey Vissarionov (2:5020/545)
Ärende: Clouds
==============
On 1/01/12 6:32 PM, Alexey Vissarionov -> David Drummond wrote:

 DS>>> I'll go you one step further. I do not understand why anyone would
 DS>>> trust their data on *ANY* cloud server, run by anyone. I want my
 DS>>> data on my own computer where only I have access to it.
 DD>> Does your bank/telecoms provider/utilities provider/police
 DD>> department/etc etc agree with you?

 AV> Mostly yes, as they use their own resources for private data processing.
 AV> And storing your own data on cloud servers is quite simple - if you rent
 AV> http://www.google.com/search?q=3.99+vps or similar, do the following:

Why would I want to do that?

 AV> Once:
 AV> % echo `head -c 256 < /dev/urandom | od -An -tx1` | sed -re 's, ,,g' >
 AV> loop.key
 AV> Save this file in a safe place and never copy it to VPS!

 AV> Once:
 AV> % dd bs=1M count=1024 if=/dev/zero of=/path/to/encrypted.image
 AV> This will create a 1 Gb file for a cryptocontainer.

 AV> # losetup -p 0 -e blowfish256 /dev/loop0 /path/to/encrypted.image
 AV> This will prompt for password; copy and paste the contents of loop.key
 AV> there. Here I recommend using the BlowFish - one of the world strongest
 AV> ciphers based on the same Feistel transform as the "Tzar-cipher" (GOST
 AV> 28147).

 AV> Once:
 AV> # mke2fs -m0 /dev/loop0
 AV> This will create a file system in your cryptocontainer.

You assume that I'm running on Linux?

 AV> # mount /dev/loop0 /mnt
 AV> # chown user: /mnt

 AV> Now you can work with your cryptocontainer - say, copy files there with
 AV> `scp secret.file vps:/mnt` and back here with `scp vps:/mnt/secret.file
 AV> .`; when finished, unmount and detach the cryptocontainer:

 AV> # umount /mnt
 AV> # losetup -d /dev/loop0

 AV> Simple, eh?

TrueCrypt works too.

 AV> Advantages: you'll have a perfectly protected place for keeping backups
 AV> of sensitive data.

I don't really have any data that sensitive as to warrant the effort.

 AV> Disadvantages: this method is unsuitable for U.S. citizens unless they
 AV> like federals knocking at their doors.

Lucky I'm not a damned U.S. citizen, nor subject to their laws.

-- 

Regards
David

--- Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:8.0) Gecko/20111105 Thunder
 * Origin: Out here in the free world. (3:640/305)