Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Code Project
  1. Home
  2. The Lounge
  3. I know I'm probably the last one here to have heard of this, but...

I know I'm probably the last one here to have heard of this, but...

Scheduled Pinned Locked Moved The Lounge
cssandroidcomsecurity
54 Posts 21 Posters 2 Views 1 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • M Mark_Wallace

    Quite recently, I noticed that Onedrive immediately accesses and spiders all your drives, not just the directory that you set aside for it. This includes all network drives, so, whether you work for a tiny firm or big corporation, all you need is one employee to install the onedrive Windows app, and MS has access to every file on every HDD belonging to the company. What makes me laugh is that they market this as a useful tool, categorically proving the purloined-letter effect.

    I wanna be a eunuchs developer! Pass me a bread knife!

    M Offline
    M Offline
    Mycroft Holmes
    wrote on last edited by
    #7

    Oh bugger, I just got Office 365, which I am learning to loathe, and it really wanted OneDrive so... The argument to chuck Office is getting stronger every day.

    Never underestimate the power of human stupidity RAH

    M 1 Reply Last reply
    0
    • M Mark_Wallace

      Basefolder[^] is bluddy cool! No storage limits (it's on your HDD!), no nags, way less risk, etc. than DropBox, gdrive, or (security horror of horrors) onedrive. Just set up a new, ne'er to be used elsewhere e-mail address for it, install it on a machine you never switch off, and Bob's yer mascot! Hopefully, the android ES File Manager boys will add it as a "share to" destination, soon, but its own android app is usable enough.

      I wanna be a eunuchs developer! Pass me a bread knife!

      S Offline
      S Offline
      sir_download_alot
      wrote on last edited by
      #8

      I'm the last! Thanks for sharing.

      M 1 Reply Last reply
      0
      • S sir_download_alot

        I'm the last! Thanks for sharing.

        M Offline
        M Offline
        Mark_Wallace
        wrote on last edited by
        #9

        CP is proving its uniqueness, again! On other message boards, everyone scrambles to be "First!"

        I wanna be a eunuchs developer! Pass me a bread knife!

        1 Reply Last reply
        0
        • M Mycroft Holmes

          Oh bugger, I just got Office 365, which I am learning to loathe, and it really wanted OneDrive so... The argument to chuck Office is getting stronger every day.

          Never underestimate the power of human stupidity RAH

          M Offline
          M Offline
          Mark_Wallace
          wrote on last edited by
          #10

          I upgraded to Office 2003. It works much better -- no ribbon, twice as fast, and no NSA back doors.

          I wanna be a eunuchs developer! Pass me a bread knife!

          M R O 3 Replies Last reply
          0
          • M Mark_Wallace

            Basefolder[^] is bluddy cool! No storage limits (it's on your HDD!), no nags, way less risk, etc. than DropBox, gdrive, or (security horror of horrors) onedrive. Just set up a new, ne'er to be used elsewhere e-mail address for it, install it on a machine you never switch off, and Bob's yer mascot! Hopefully, the android ES File Manager boys will add it as a "share to" destination, soon, but its own android app is usable enough.

            I wanna be a eunuchs developer! Pass me a bread knife!

            S Offline
            S Offline
            Sunil kumar Suryavamshi
            wrote on last edited by
            #11

            Thank you for this useful information, I have just downloaded and started using basefolder.

            1 Reply Last reply
            0
            • M Mark_Wallace

              Basefolder[^] is bluddy cool! No storage limits (it's on your HDD!), no nags, way less risk, etc. than DropBox, gdrive, or (security horror of horrors) onedrive. Just set up a new, ne'er to be used elsewhere e-mail address for it, install it on a machine you never switch off, and Bob's yer mascot! Hopefully, the android ES File Manager boys will add it as a "share to" destination, soon, but its own android app is usable enough.

              I wanna be a eunuchs developer! Pass me a bread knife!

              L Offline
              L Offline
              Lost User
              wrote on last edited by
              #12

              Pardon my cynicism, but in what way less risK? You are exposing your computer to the cloud via some software that presumably promises (honest injun) to only share them with you... not sayin' it's not secure - but no reason to assume any more secure than any of the other options - just because the hard drive is in your house

              PooperPig - Coming Soon

              M D 2 Replies Last reply
              0
              • M Mark_Wallace

                I upgraded to Office 2003. It works much better -- no ribbon, twice as fast, and no NSA back doors.

                I wanna be a eunuchs developer! Pass me a bread knife!

                M Offline
                M Offline
                Mycroft Holmes
                wrote on last edited by
                #13

                I tried to install my 207 on a windows 8.1 and it was not a supported OS, what bullshit!

                Never underestimate the power of human stupidity RAH

                M 1 Reply Last reply
                0
                • M Mycroft Holmes

                  I tried to install my 207 on a windows 8.1 and it was not a supported OS, what bullshit!

                  Never underestimate the power of human stupidity RAH

                  M Offline
                  M Offline
                  Mark_Wallace
                  wrote on last edited by
                  #14

                  Ha! 2003 installed right away on 8.1, with no problems! Yup, all they do is improve their software...

                  I wanna be a eunuchs developer! Pass me a bread knife!

                  1 Reply Last reply
                  0
                  • L Lost User

                    Pardon my cynicism, but in what way less risK? You are exposing your computer to the cloud via some software that presumably promises (honest injun) to only share them with you... not sayin' it's not secure - but no reason to assume any more secure than any of the other options - just because the hard drive is in your house

                    PooperPig - Coming Soon

                    M Offline
                    M Offline
                    Mark_Wallace
                    wrote on last edited by
                    #15

                    _Maxxx_ wrote:

                    You are exposing your computer to the cloud via some software that...

                    ... Neither asks for nor stores any personal information about you (I don't consider a user-name and e-mail address to be "personal information"). There's no background app/service (google drive requires two, for god-only knows what "not evil" reasons). Plus, you can disconnect "catastrophically" at any time by simply renaming a folder.

                    I wanna be a eunuchs developer! Pass me a bread knife!

                    D 1 Reply Last reply
                    0
                    • M Mark_Wallace

                      _Maxxx_ wrote:

                      You are exposing your computer to the cloud via some software that...

                      ... Neither asks for nor stores any personal information about you (I don't consider a user-name and e-mail address to be "personal information"). There's no background app/service (google drive requires two, for god-only knows what "not evil" reasons). Plus, you can disconnect "catastrophically" at any time by simply renaming a folder.

                      I wanna be a eunuchs developer! Pass me a bread knife!

                      D Offline
                      D Offline
                      Dan Neely
                      wrote on last edited by
                      #16

                      Mark_Wallace wrote:

                      There's no background app/service (google drive requires two, for god-only knows what "not evil" reasons).

                      Oh elephant crap. If you're able to go to www.somewebsiteyoudontown.pwndyou and download files off your home computer there has to be at least one application running on your home computer to send you the files. The fact that they don't say anything about how it works in their FAQ has my paranoia flag running up the flagpole next to _Maxxx_'s. The biggest question I've got is if they store an index of all the files you're sharing on their site or not. They say they don't store any personal data; but when they explicitly list what personal data they don't store names/metadata of your files isn't listed...

                      Did you ever see history portrayed as an old man with a wise brow and pulseless heart, waging all things in the balance of reason? Is not rather the genius of history like an eternal, imploring maiden, full of fire, with a burning heart and flaming soul, humanly warm and humanly beautiful? --Zachris Topelius Training a telescope on one’s own belly button will only reveal lint. You like that? You go right on staring at it. I prefer looking at galaxies. -- Sarah Hoyt

                      M 2 Replies Last reply
                      0
                      • M Mark_Wallace

                        Quite recently, I noticed that Onedrive immediately accesses and spiders all your drives, not just the directory that you set aside for it. This includes all network drives, so, whether you work for a tiny firm or big corporation, all you need is one employee to install the onedrive Windows app, and MS has access to every file on every HDD belonging to the company. What makes me laugh is that they market this as a useful tool, categorically proving the purloined-letter effect.

                        I wanna be a eunuchs developer! Pass me a bread knife!

                        M Offline
                        M Offline
                        Member 10680475
                        wrote on last edited by
                        #17

                        This feature can be turned off. Go to the OneCloud systray icon - check settings - "Let OneDrive fetch all files on my computer"

                        M 1 Reply Last reply
                        0
                        • L Lost User

                          Pardon my cynicism, but in what way less risK? You are exposing your computer to the cloud via some software that presumably promises (honest injun) to only share them with you... not sayin' it's not secure - but no reason to assume any more secure than any of the other options - just because the hard drive is in your house

                          PooperPig - Coming Soon

                          D Offline
                          D Offline
                          d shapiro
                          wrote on last edited by
                          #18

                          And what's the difference between installing this and setting up an FTP service on your machine? It sounds to me as if basefolder is just a (much) simplified FTP service.

                          L A P 3 Replies Last reply
                          0
                          • D d shapiro

                            And what's the difference between installing this and setting up an FTP service on your machine? It sounds to me as if basefolder is just a (much) simplified FTP service.

                            L Offline
                            L Offline
                            Lost User
                            wrote on last edited by
                            #19

                            d.shapiro wrote:

                            And what's the difference between installing this and setting up an FTP service on your machine?

                            I would imagine that the FTP server is under your own control and not reliant on a third party website.

                            D 1 Reply Last reply
                            0
                            • M Mark_Wallace

                              Basefolder[^] is bluddy cool! No storage limits (it's on your HDD!), no nags, way less risk, etc. than DropBox, gdrive, or (security horror of horrors) onedrive. Just set up a new, ne'er to be used elsewhere e-mail address for it, install it on a machine you never switch off, and Bob's yer mascot! Hopefully, the android ES File Manager boys will add it as a "share to" destination, soon, but its own android app is usable enough.

                              I wanna be a eunuchs developer! Pass me a bread knife!

                              M Offline
                              M Offline
                              Man of Code
                              wrote on last edited by
                              #20

                              Another option: Any one use BitTorrent Sync? (I do.) Cloudless, fast, secure (as if there were such a thing), mobile clients, sharing. What's not to love (i.e. why is BitTorrent Sync evil too)?

                              -Man of Code

                              H 1 Reply Last reply
                              0
                              • D d shapiro

                                And what's the difference between installing this and setting up an FTP service on your machine? It sounds to me as if basefolder is just a (much) simplified FTP service.

                                A Offline
                                A Offline
                                A A J Rodriguez
                                wrote on last edited by
                                #21

                                d.shapiro wrote:

                                It sounds to me as if basefolder is just a (much) simplified FTP service.

                                And not even SFTP.

                                1 Reply Last reply
                                0
                                • L Lost User

                                  d.shapiro wrote:

                                  And what's the difference between installing this and setting up an FTP service on your machine?

                                  I would imagine that the FTP server is under your own control and not reliant on a third party website.

                                  D Offline
                                  D Offline
                                  d shapiro
                                  wrote on last edited by
                                  #22

                                  That's the point I was alluding to. If this thing works like an FTP, I'd rather install an FTP that I have full control over.

                                  1 Reply Last reply
                                  0
                                  • M Man of Code

                                    Another option: Any one use BitTorrent Sync? (I do.) Cloudless, fast, secure (as if there were such a thing), mobile clients, sharing. What's not to love (i.e. why is BitTorrent Sync evil too)?

                                    -Man of Code

                                    H Offline
                                    H Offline
                                    Herbie Mountjoy
                                    wrote on last edited by
                                    #23

                                    This looks like a snoopers dream. Get access to several computers with the full assistance of the user. No need to set up an expensive cloud storage system to lure them in. What's to say they aren't renting out space on your machine as cloud storage. I like to keep my stuff private thank you very much. Can't beat an air gap.

                                    I may not last forever but the mess I leave behind certainly will.

                                    M 1 Reply Last reply
                                    0
                                    • D d shapiro

                                      And what's the difference between installing this and setting up an FTP service on your machine? It sounds to me as if basefolder is just a (much) simplified FTP service.

                                      P Offline
                                      P Offline
                                      patbob
                                      wrote on last edited by
                                      #24

                                      d.shapiro wrote:

                                      And what's the difference between installing this and setting up an FTP service on your machine?

                                      The difference? All your files don't go through a third party's servers on the way to your computer, where they can be conveniently snooped or duplicated without your knowledge. They go though the ftp server, but you control that and the machine it runs on. Also, there's no convenient third party that somebody can coerce into providing them access to your files without your knowledge. From a security perspective, there's a big difference between the two.

                                      We can program with only 1's, but if all you've got are zeros, you've got nothing.

                                      1 Reply Last reply
                                      0
                                      • M Member 10680475

                                        This feature can be turned off. Go to the OneCloud systray icon - check settings - "Let OneDrive fetch all files on my computer"

                                        M Offline
                                        M Offline
                                        Mark_Wallace
                                        wrote on last edited by
                                        #25

                                        I know. But the reasoning behind it being on by default is...?

                                        I wanna be a eunuchs developer! Pass me a bread knife!

                                        D 1 Reply Last reply
                                        0
                                        • D Dan Neely

                                          Mark_Wallace wrote:

                                          There's no background app/service (google drive requires two, for god-only knows what "not evil" reasons).

                                          Oh elephant crap. If you're able to go to www.somewebsiteyoudontown.pwndyou and download files off your home computer there has to be at least one application running on your home computer to send you the files. The fact that they don't say anything about how it works in their FAQ has my paranoia flag running up the flagpole next to _Maxxx_'s. The biggest question I've got is if they store an index of all the files you're sharing on their site or not. They say they don't store any personal data; but when they explicitly list what personal data they don't store names/metadata of your files isn't listed...

                                          Did you ever see history portrayed as an old man with a wise brow and pulseless heart, waging all things in the balance of reason? Is not rather the genius of history like an eternal, imploring maiden, full of fire, with a burning heart and flaming soul, humanly warm and humanly beautiful? --Zachris Topelius Training a telescope on one’s own belly button will only reveal lint. You like that? You go right on staring at it. I prefer looking at galaxies. -- Sarah Hoyt

                                          M Offline
                                          M Offline
                                          Mark_Wallace
                                          wrote on last edited by
                                          #26

                                          Dan Neely wrote:

                                          If you're able to go to www.somewebsiteyoudontown.pwndyou and download files off your home computer there has to be at least one application running on your home computer to send you the files.

                                          Yeah. It's called an Internet browser. When you close the window/tab, the site is closed. This isn't like DropBox, in that it copies all files to all machines. I repeat: There is no background app/service. I looked for one, and if I didn't find it, then it doesn't exist. They cannot do anything that cannot be executed by a web browser, and I don't know about you, but I have three separate programs that keep an eye out for suspicious web-page activity.

                                          Dan Neely wrote:

                                          The biggest question I've got is if they store an index of all the files you're sharing on their site or not

                                          Of course they do, so that they can present it to you when you open the site in a web browser. If you think that a list of files attached to an (anonymous) e-mail account is somehow dangerous, then you probably ought to stop drinking so much coffee. And let's bear in mind what the other options are, eh? The google drive thing, for example, retains the content of your files, attaches them to an account (which you have to verify, by providing your telephone or credit-card number), which stores way too much information about you, and links them to just about everything you do on the Internet. It also requires you to install a number of programs on your system, at least two of which are running constantly, doing whatever the Hell they like, because, well, because you installed them, so it's your fault if they do things you don't like. BaseFolder doesn't even try to find out who you are; all it asks for is an e-mail address and a user-name, neither of which have to be connected to your off-line life or to any other thing you do/have on the Internet.

                                          I wanna be a eunuchs developer! Pass me a bread knife!

                                          1 Reply Last reply
                                          0
                                          Reply
                                          • Reply as topic
                                          Log in to reply
                                          • Oldest to Newest
                                          • Newest to Oldest
                                          • Most Votes


                                          • Login

                                          • Don't have an account? Register

                                          • Login or register to search.
                                          • First post
                                            Last post
                                          0
                                          • Categories
                                          • Recent
                                          • Tags
                                          • Popular
                                          • World
                                          • Users
                                          • Groups