12 Replies. 1 pages. Viewing page 1.
Newer [  1  ] Older
12.
 
Re: Morning Safety Dance
Jul 25, 2014, 21:01
12.
Re: Morning Safety Dance Jul 25, 2014, 21:01
Jul 25, 2014, 21:01
 
dj LiTh wrote on Jul 25, 2014, 11:40:
Well i'm man enough to admit when he's wrong. It still seems like a vulnerability the more you update that TC volume and sync it to dropbox though. Also who's this Lilith you speak of eRe4s3r

Haha, my bad I was playing a bit Diablo 3 and heard the name there so often.... the mind takes curious shortcuts sometimes

If truecrypt encrypts properly and you use a good algorithm then delta syncing should be as secure (or insecure?) as truecrypt itself is. Since only a self-contained segment/piece of a whole container is sent, in essence this is as secure as the whole container is, or isn't.. depending on your settings.

I think truecrypt couldn't even work without doing this kind of thing to the container. If it re-encoded the entire container for each change, you'd kill your CPU and HDD in the process if it's full/large ;p

This comment was edited on Jul 25, 2014, 21:08.
Avatar 54727
11.
 
Re: Morning Safety Dance
Jul 25, 2014, 11:40
11.
Re: Morning Safety Dance Jul 25, 2014, 11:40
Jul 25, 2014, 11:40
 
Well i'm man enough to admit when he's wrong. It still seems like a vulnerability the more you update that TC volume and sync it to dropbox though. Also who's this Lilith you speak of eRe4s3r

This comment was edited on Jul 25, 2014, 12:05.
Avatar 46370
10.
 
Re: Morning Safety Dance
Jul 24, 2014, 22:28
10.
Re: Morning Safety Dance Jul 24, 2014, 22:28
Jul 24, 2014, 22:28
 
Longswd wrote on Jul 24, 2014, 20:40:
dj LiTh wrote on Jul 24, 2014, 19:11:
Longswd wrote on Jul 24, 2014, 15:48:
Data is data, even if it's a container. Anything capable of backing up only delta changes in a SQL db should also be able to backup a Truecrypt volume.


Its pretty clear you dont understand how encryption works, and if it did work like you suggest then it would be easily defeated.

Uhm, yeah? No.

www.makeuseof.com/tag/5-ways-to-securely-encrypt-your-files-in-the-cloud/

The relevant portion:

"Why Dropbox? Good question. Dropbox can synchronize only the changed portions of large files, while Google Drive and SkyDrive can only synchronize entire files (as far as I can tell). This means that, if you have a 2GB TrueCrypt drive and change a small file in it, Dropbox will upload a small portion of the TrueCrypt file, while Google Drive and SkyDrive will re-upload the entire 2GB file. Some other cloud storage services may also offer delta uploads – be sure you choose one that does if you’re using a TrueCrypt volume."


Given that truecrypt likely does the "lazy" approach of container (ie, it's a bunch of self-contained parts like torrent protocol does it) delta change syncs are secure... assuming the sync tool is advanced enough, detecting which hashed part of a file changed is easy and sending that over and merging it is as well.

So sorry, DJ Lilith but Longswd is right, delta syncing of truecrypt volume is possible, and secure.

Avatar 54727
9.
 
Re: Morning Safety Dance
Jul 24, 2014, 20:40
9.
Re: Morning Safety Dance Jul 24, 2014, 20:40
Jul 24, 2014, 20:40
 
dj LiTh wrote on Jul 24, 2014, 19:11:
Longswd wrote on Jul 24, 2014, 15:48:
Data is data, even if it's a container. Anything capable of backing up only delta changes in a SQL db should also be able to backup a Truecrypt volume.


Its pretty clear you dont understand how encryption works, and if it did work like you suggest then it would be easily defeated.

Uhm, yeah? No.

www.makeuseof.com/tag/5-ways-to-securely-encrypt-your-files-in-the-cloud/

The relevant portion:

"Why Dropbox? Good question. Dropbox can synchronize only the changed portions of large files, while Google Drive and SkyDrive can only synchronize entire files (as far as I can tell). This means that, if you have a 2GB TrueCrypt drive and change a small file in it, Dropbox will upload a small portion of the TrueCrypt file, while Google Drive and SkyDrive will re-upload the entire 2GB file. Some other cloud storage services may also offer delta uploads – be sure you choose one that does if you’re using a TrueCrypt volume."

I don't always drink carbonated Mexican rat piss, but when I do, I prefer Dos Equis.
8.
 
Re: Morning Safety Dance
Jul 24, 2014, 19:11
8.
Re: Morning Safety Dance Jul 24, 2014, 19:11
Jul 24, 2014, 19:11
 
Longswd wrote on Jul 24, 2014, 15:48:
Data is data, even if it's a container. Anything capable of backing up only delta changes in a SQL db should also be able to backup a Truecrypt volume.


Its pretty clear you dont understand how encryption works, and if it did work like you suggest then it would be easily defeated.
Avatar 46370
7.
 
Re: Morning Safety Dance
Jul 24, 2014, 15:48
7.
Re: Morning Safety Dance Jul 24, 2014, 15:48
Jul 24, 2014, 15:48
 
Data is data, even if it's a container. Anything capable of backing up only delta changes in a SQL db should also be able to backup a Truecrypt volume.

I don't always drink carbonated Mexican rat piss, but when I do, I prefer Dos Equis.
6.
 
Re: Morning Safety Dance
Jul 24, 2014, 12:39
6.
Re: Morning Safety Dance Jul 24, 2014, 12:39
Jul 24, 2014, 12:39
 
DrSquick wrote on Jul 24, 2014, 11:19:
Can services like Dropbox do block-level syncing? For example, if you make a 1GB TrueCrypt volume, and modify 1MB of data inside it, does Dropbox need to send the whole 1GB back to the cloud, or can it just sync the blocks that changed?

If it can't do block level, that kinda kills any ability to do your own encryption, right? Or am I missing a tool that I should know about?

It wont work as Truecrypt your just making a container. As far as services I recommend Tresorit myself in place of dropbox.
Avatar 46370
5.
 
Re: Morning Safety Dance
Jul 24, 2014, 11:19
5.
Re: Morning Safety Dance Jul 24, 2014, 11:19
Jul 24, 2014, 11:19
 
Can services like Dropbox do block-level syncing? For example, if you make a 1GB TrueCrypt volume, and modify 1MB of data inside it, does Dropbox need to send the whole 1GB back to the cloud, or can it just sync the blocks that changed?

If it can't do block level, that kinda kills any ability to do your own encryption, right? Or am I missing a tool that I should know about?
4.
 
Re: Morning Safety Dance
Jul 24, 2014, 10:53
4.
Re: Morning Safety Dance Jul 24, 2014, 10:53
Jul 24, 2014, 10:53
 
Burrito of Peace wrote on Jul 24, 2014, 10:11:
I will never understand why people who are concerned about privacy don't user services like Spideroak instead of Dropbox.

As soon as you mention "security costs money" most people shut their brains off. Services like dropbox exist and finance themselves from the data mining they do. And ease of use plays into the hands of security issues as well.... most people are too lazy to use a password manager, or a usb-keystorage device to encrypt data. And as soon as you mention "it might cost money" ... there goes security out of the window.
Avatar 54727
3.
 
Re: Morning Safety Dance
Jul 24, 2014, 10:11
3.
Re: Morning Safety Dance Jul 24, 2014, 10:11
Jul 24, 2014, 10:11
 
I will never understand why people who are concerned about privacy don't user services like Spideroak instead of Dropbox.
"Just take a look around you, what do you see? Pain, suffering, and misery." -Black Sabbath, Killing Yourself to Live.

“Man was born free, and he is everywhere in chains” -Jean-Jacques Rousseau
Avatar 21247
2.
 
Re: Morning Safety Dance
Jul 24, 2014, 09:38
2.
Re: Morning Safety Dance Jul 24, 2014, 09:38
Jul 24, 2014, 09:38
 
eRe4s3r wrote on Jul 24, 2014, 09:22:
So basically dropbox advises you not to use dropbox if you care about who reads your stuff... that they have data encrypted on their servers is a flat out lie, every single dropbox employee can see and read your files. If they encrypted the data, they can decrypt it.

Very true
Avatar 25373
1.
 
Re: Morning Safety Dance
Jul 24, 2014, 09:22
1.
Re: Morning Safety Dance Jul 24, 2014, 09:22
Jul 24, 2014, 09:22
 
So basically dropbox advises you not to use dropbox if you care about who reads your stuff... that they have data encrypted on their servers is a flat out lie, every single dropbox employee can see and read your files. If they encrypted the data, they can decrypt it.
Avatar 54727
12 Replies. 1 pages. Viewing page 1.
Newer [  1  ] Older