Hacker News new | ask | show | jobs
by ZeroCool2u 2658 days ago
There are a number of alternative paths in this space if you're truly focused and willing to invest a bit, but if you care about privacy enough to seek a service like this out and just want to minimize mental overhead, this seems like a good choice.

Tahoe-LAFS makes some impressive claims like maintaining confidentiality while running on untrusted machines. I think a lot of folks now would assert that really any machine running x86 due to Intel ME and the AMD equivalent should in fact be untrusted.

I'm not in a position to criticize though, this is just from a cursory glance at the summary page, and frankly I used PIA as my own VPN provider for a number of years and had only positive experiences.

2 comments

(author of Tahoe here, although I'm not much involved these days)

> Tahoe-LAFS makes some impressive claims like maintaining confidentiality while running on untrusted machines. I think a lot of folks now would assert that really any machine running x86 due to Intel ME and the AMD equivalent should in fact be untrusted.

To be precise, our claim is that you can use untrusted servers, since the client encrypts the data before it leaves your machine. You are, of course, entirely reliant on your own client being trustworthy. Nothing can save you if your client is compromised, whether via ME, a BIOS infection, an OS rootkit, or a boring old userspace compromise.

The Tahoe-LAFS client runs pretty well on ARM and Raspberry PIs, in case that feels better.

"There are a number of alternative paths in this space if you're truly focused and willing to invest a bit, but if you care about privacy enough to seek a service like this out and just want to minimize mental overhead, this seems like a good choice."

It feels to me like 'borg'[1] is becoming the de facto standard for this use-case. There were a number of similar tools (like duplicity) for years but borg seems to have buttoned up all of the issues.

Some call it the "holy grail of backups".[2]

[1] https://borgbackup.readthedocs.io/en/stable/

[2] https://www.stavros.io/posts/holy-grail-backups/

Borg et al are specifically made for backups. Tahoe-LAFS is for general use.