Hacker News new | ask | show | jobs
by brasetvik 4746 days ago
"In Norway, privacy stands firm like the mighty mountains of Jotunheimen.".

Let's not flatter ourselves too much: http://no.wikipedia.org/wiki/Datalagringsdirektivet (in Norwegian, http://translate.google.com/translate?sl=auto&tl=en&js=n&pre...), or the less detailed http://en.wikipedia.org/wiki/Data_Retention_Directive

3 comments

I don't think DLD/DRD is conflicting with the statements given in the post, as DLD only concerns itself with metadata (and yes, that can be harmful), and the article talks about the actual data. Both are important, but different, topics.
I was more objecting the very marketing-y-and-not-very-truthy quote.

That said, digging a bit more into Jottacloud does not make me any more likely to use the service, for anything I would be concerned to store at, say, Dropbox:

Their FAQ is (intentionally?) vague. How do they encrypt stuff?

"all datatraffic between your computer and Jottacloud is encrypted with 256 bits AES high grade encryption, which makes it virtually impossible for unauthorized persons to use the information being sent.".

And then:

"If you log into www.jottacloud.com it’s possible to download, view pictures and share files with friends and colleagues"

Right, so they would have the keys anyway.

Well, after reading Snowden's comments about what is available (everything) - it would seem that DLD goes hand in hand with storing all traffic for a limited time -- you would need help searching that to actually recover something.
> DLD goes hand in hand with storing all traffic for a limited time

Nope? From the linked translated wikipedia page:

> Data that reveals the content of the communication must not be stored

I meant - if you already, illegally store everything - that everything is problematic to search, and to store permanently. If you also, legally, through DLD store metadata, then that makes your illegally collected data more useful.
They provide an English version here: http://www.jottacloud.com/its-your-stuff-guaranteed/
As mentioned in a comment on the post, The EU Data Retention Directive does not apply to cloud storage providers. Not yet at least.