Showing posts with label cryptography. Show all posts
Showing posts with label cryptography. Show all posts

2022-07-10

FOLLOW-UP: Some Recent Troubles with pCloud and Google Chat

Almost exactly 11 months ago, I wrote a post [LINK] about problems I was experiencing with pCloud and Google Chat. I don't have any updates about Google Chat (or Google Meet), but I do have an update regarding pCloud. In the previous post, I noted that for files & folders protected by standard encryption (as opposed to stronger zero-knowledge encryption, for which this problem doesn't exist in pCloud), some files & folders require multiple attempts to transfer; I also speculated that pCloud may have been secretly deleting files & folders. After having spent more time using pCloud, I've been able to verify that my files & folders protected by standard encryption have transferred properly, and I think I've figured out why they initially seemed to require multiple attempts to transfer.

As I understand, pCloud creates a temporary folder, essentially like a cache, on the local hard drive, to transfer files before they are uploaded to pCloud. The process of transferring from the local cache to pCloud is limited by upload speeds, which are quite slow (as I mentioned in the previous post). Additionally, once the pCloud program is closed and the remote drive is unmounted, file transfer stops, so many folders & files that the user might think were transferred might not have been transferred. A good way to verify this is to leave the desktop application for pCloud open, monitor how many files as well as what total amount of data still remain to be transferred, and only close the application when all folders & files have been transferred; I like to think of it as a practice similar to leaving a torrent open for uploading after it has finished downloading.

2021-08-09

Some Recent Troubles with pCloud and Google Chat

Originally, I was going to write a post just about my experiences with pCloud, following up on a recent post in which I wrote of wanting a secure cloud storage service that preserves data privacy and concluded that pCloud is the best option for my needs. Since then, Google forced me to migrate from Google Hangouts to the new Google Chat, so I decided to write about experiences with both of those in a single post. Note that this isn't a full review of either product, as I haven't explored either one in great depth. This is just a short write-up of my experiences using each product to satisfy my needs. Furthermore, in the interest of my own privacy, I won't be posting any screenshots.

pCloud

I have been using pCloud for the last 1.5 months. In that time, I have experienced a few benefits but significantly more concerning problems. The benefits are that the zero-knowledge encryption service seems trustworthy (to someone like me who has some technical knowledge but no specific expertise with encryption), the integration with Linux Mint seems reasonably good as it is possible to open both the standard and zero-knowledge encrypted folders using desktop file managers, the web interface makes sharing links with others easy, and it is cheap. Before I list the problems, I should note that I've only tried pCloud for my own purposes on my laptop that has Linux Mint 20 "Ulyana" MATE installed. Therefore, it isn't clear whether the problems are specific to this setup.

The problems are as follows.

  1. For folders protected by standard encryption, some folders don't transfer properly and may require multiple attempts to transfer, whether using the desktop file manager or the web interface. It may take a few sessions to figure out which folders didn't transfer properly. (It may also be possible that pCloud, having the encryption keys, is secretly deleting folders. This would be extremely troubling, but I haven't paid close enough attention to know whether a folder didn't transfer properly or whether it did but was later deleted.)
  2. File transfers are very slow, because while some transfers can go up to 20 MB per second (which is reasonable given that I have an Internet connection that allows for up to 100 MB per second in each direction), most file transfers are only around 1 MB per second. Any transfer that involves copying thousands of small files & folders especially seems to create a bottleneck and slow things down further. For this reason, it took me many hours over several days to transfer hundreds of gigabytes of files to pCloud.
  3. The web interface doesn't allow for uploading folders as such (only file contents within an existing folder).
  4. When transferring to folders protected by zero-knowledge encryption, timeouts occur unpredictably and require encrypting and again decrypting those folders. Additionally, such transfers have unpredictably but on multiple occasions (though certainly not on every occasion) caused the desktop to freeze.

These problems are troubling enough that I wouldn't recommend pCloud to others, despite the fact that it is one of the few secure cloud storage providers that protects data privacy (at least with zero-knowledge encryption) and ostensibly gives Linux users the same benefits as users of other operating systems. I'm a patient person and I've spent enough money on this, so I'm willing to put more time into making this work. However, if these problems keep occurring regularly or if I see even worse problems like evidence of pCloud deleting files that were uploaded without zero-knowledge encryption, I will likely switch to Tresorit and keep looking for other alternatives too.

Google Chat

Without even getting into the particular issues with Google Chat, I'd like to express how strange it is that Google seems to change its messaging platform around once every 4-5 years. It feels like Google thinks it has to catch up to other services or like Google really doesn't care about its messaging platform.

Having said that, there are benefits and problems with Google Chat. I do appreciate that it has migrated my previous conversations from Google Hangouts. Additionally, many of the features, like document sharing within conversations, seem pretty nifty. However, there are two big problems that I have with the design of Google Chat along with its companion program Google Meet.

  1. The version of Google Chat that is integrated into Gmail is missing quite a few features compared to the way that Google Hangouts was integrated into Gmail, like seeing contacts who are online (as opposed to only seeing previous conversation threads, which is a problem because before, I could have a chance of seeing someone pop online that I haven't talked to in a while and would therefore get the idea of reaching out to that person, whereas now, seeing only recent messages self-reinforces a narrowing group of conversations). The separate Google Chat website at least has the date or time of the most recent message in a thread (whereas the version of Google Chat integrated into Gmail lacks even this) but does not have the aforementioned feature of seeing contacts who are online.
  2. Splitting voice or video calls out of Google Hangouts and into Google Meet is problematic because Google Meet lacks the immediacy of a Google Hangouts call: when a call is placed on Google Hangouts, the website or app will immediately ring for all recipients, whereas when a Google Meet link is created, the sender must wait for recipients to react to a single beep indicating a new message containing the link.

I think I can get used to Google Chat and Google Meet soon enough. If nothing else, perhaps it is an ironic consolation that I won't have to deal with it so much because the group of people that I keep in touch with over Google Hangouts (and now Google Chat) has significantly narrowed over the years (as I now keep in touch with most people through platforms other than Facebook products or Google Chat).

2021-05-17

Manually Creating a Rudimentary Searchable Image Tagging System

This post is the third in a series of three posts about some changes I have been making in my personal life with respect to how I interact with online social media platforms. When I published the second post in this series, I was on the lookout for secure privacy-respecting cloud storage services. As of this post, I still haven't committed to a specific service. One of my requirements has been that the service should allow me to share certain files or folders securely with others. Unfortunately, unless I use a service like Google Drive which has just as little respect for data privacy as Facebook does, it isn't clear how I can easily tag images with details about people, location, and other comments in a way that I or others can easily search. My proposed solution, involving BASH scripts, is far from perfect, it is very much a work in progress, and it is arguably somewhat specific to my particular situation. Follow the jump to see more details.

2021-04-27

Looking for Secure Cloud Storage that Respects Data Privacy

This post is the second in a series of three posts about some changes I have been making in my personal life with respect to how I interact with online social media platforms, and how that affects this blog. When I published the first post in this series, I had completely deleted the Facebook and Twitter pages associated with this blog, and I mentioned that I was on the lookout for a secure cloud storage site that respects data privacy (which meant options like Google Drive, Dropbox, or Flickr were not going to satisfy my desires). Since then, I have conducted almost all of my frequent conversations on platforms not owned by Facebook, and I have been in the process of conducting all other infrequent conversations away from Facebook platforms too. However, I have still been on the lookout for such a secure cloud storage site that would also allow me to securely share files, especially pictures, with others, without compromising the privacy of my data. This post goes over some information that I have compiled over different potential candidate services. This is not a review, because I have not actually tested any of these services yet. Follow the jump to see more about each candidate and where I lean.

2010-07-27

FOLLOW-UP: Truly Competitive Cell Phone Markets

The US government has had an unprecedented bout of sensibility (Joelle Tessler, Associated Press via Yahoo! News) of late. It covers quite a few areas, so I'll try to go through each point one-by-one. In general, the new statement says that breaking technological locks on devices is not in itself illegal unless provable copyright infringement is committed.
The biggest news is that anyone can unlock their cell phone to work with any service provider or to use any application developed for that phone. The phone most affected by this news is, of course, the iPhone (which has thus far been locked to AT&T and can only run apps approved by Apple).
Now, anyone can run any app they want and use it on any network (supported by the hardware) that they want. Prior to this, Apple claimed that under the provisions of the DMCA, jailbreaking iPhones and iPod Touches is illegal (and they threatened to sue jailbreakers). Now, this can't happen (unless, of course, the third-party apps are guilty of copyright infringement).
The reason why I made this a follow-up post to this post is because although phones are not likely to be sold unlocked from the start, users now have the choice of moving their phone to any carrier (provided the phone's hardware supports calls on that carrier). Now, cell phone markets can be more competitive (though the situation isn't quite ideal yet).
Along with the new rules regarding cell phones, people can now break controls on video games to patch security issues. This is almost an open-sourcing of video games, which is great (though this circumvention of technical restrictions is pretty specific).
People can break locks on DVDs and use clips from these DVDs "for educational purposes, criticism or commentary." This is a huge victory for fair use; that really is what fair use is about. This could also mean that the arrest of a European cryptography professor for breaking, analyzing, and publicizing some encryption scheme at a conference will never happen again. Also, people can now make their own videos with clips from movies without fear of being sued for copyright infringement (or so I hope).
Finally, blind people can break locks on e-books to use them with any text-to-speech software. This is a huge step forward, as I have reported in the past cases of publishing houses refusing to release books in formats friendly to blind people for fear of "potential copyright infringement".
Could this be true? Could we actually have a government that cares more about the rights of ordinary citizens than about the "rights" of vested interests? WOW!