Secure Storage, File Encryption, & The Cloud | Go Incognito 3.14
ฝัง
- เผยแพร่เมื่อ 23 ส.ค. 2020
- Welcome to Go Incognito, a full guide to security, privacy and anonymity. This is lesson 14 of Section 3: Storage & Encryption. This lesson will teach how to encrypt and secure files on your computer and other devices. You will learn about storage, encryption, cloud storage, and other techniques to properly secure your data. Keep an eye on full disk encryption in section 5!
Help us spread privacy to the masses! 💜
Patreon: / techlore
TH-cam Supporters: / @techlore
Thanks for watching the free version of the course - Go Incognito Premium has no ads, includes quizzes & guides, hundreds of improvements, a certificate, and much more! Support our mission & join the premium experience: techlore.teachable.com/p/go-i...
To access the sources, changelog, GitHub repo, and more, visit Go Incognito's Homepage: techlore.tech/goincognito.html
🔐 Our Website: techlore.tech
🕵 Go Incognito Course - to learn about privacy: techlore.tech/goincognito
🏫 Techlore Coaching - to get direct support: techlore.tech/coaching
💻 Techlore Forum - to connect with other advocates: discuss.techlore.tech
🦣 Mastodon - to stay updated: social.lol/@techlore
We cannot provide our content without our Patrons, huge thanks to:
BRIGHTSIDE, Clark, Ente, Larry, Afonso, Boori, Brad, Casper, Cookie, Floyd, JohnnyO, kevin, love your content, NotSure, Poaclu, x
🧡 Join them on Patreon: / techlore
💚 To see our production gear, privacy tools we use, and other affiliates: techlore.tech/affiliates
💖 All Techlore Support Methods: techlore.tech/support
#techlore #goincognito #encryption - วิทยาศาสตร์และเทคโนโลยี
Thanks for tuning in to Go Incognito! 🕵️♂️
1) Go Incognito Premium has no ads, includes quizzes & guides, hundreds of improvements, a certificate, and much more! Support our mission & join the premium experience: techlore.teachable.com/p/go-incognito
2) To access the sources, changelog, GitHub repo, and more, visit Go Incognito's Homepage: techlore.tech/goincognito.html
3) To order Go Incognito merchandise, visit our Privacy Shop: teespring.com/stores/techlore-merch
4) Go Incognito is offered for free thanks to all of our supporters. Support Techlore and our mission today: techlore.tech/support.html
What do you think about pcloud
So I have pCloud and Icedrive. From a security standpoint, do you think they are trustworthy? Both of them reside away from U.S. jurisdiction and they have end-to-end encryption.
I just upload all my files to Facebook and I'm good to go.
honestly tho i dont get why people hate on facebook
@4:35
"If you do go with one of these services, try to encrypt your files using one of the services we discussed earlier, and only send encrypted files through the cloud services"
In the case of VeraCrypt, it means that it is safe to upload your encrypted VeraCrypt volume to a third party service. But it does not mean that you should upload files or folders within your encrypted volume to a third party service.
In other words, when you open (or mount) one of your VeraCrypt volumes, it looks to be in the clear, like any other volume. You can use your files within your VeraCrypt volume the same as any other drive letter.
So if you tag X number of files or folders and upload them to a cloud storage service, you are giving them your files without your VeraCrypt encryption -- and that is bad. It defeats the point of you having your data encrypted by VeraCrypt.
Each VeraCrypt volume is stored in a single encrypted file. The only way you should upload anything related to your VeraCrypt content is to upload the VeraCrypt file (never its individual file contents). You would need to have not yet mounted your VeraCrypt volume (or if you did, you need to dismount it) and then upload the single file which is the volume.
If you used VeraCrypt to encrypt your C: partition, then you are out of luck, as there is no single file to upload. Anything from your C: drive that you upload will first be decrypted by VeraCrypt and then uploaded to the cloud storage service.
By the way, I agree with our host about his admiration for VeraCrypt.
It is free, open-source, easy to learn and use, powerful, secure, and cross-platform. It is a win/win/win combination. The VeraCrypt developers are brilliant!
Perhaps Thanks for this wonderful comment!
Just became a patron! Keep up the great work!
Welcome aboard!
Thank you so much *-*
The one I always use is Internxt Drive, it is decentralized, open source and zero-knowledge. So basically all your files are encrypted, divided and send to different nodes and no one has the key to decrypt your data (as you said in the video other platforms such as DropBox hold this key). And is easy to use and I like that because even my girlfriend that hates computers and technology can use it.
Thanks
Where is Tresorit ???
Awesomee
BitLocker is similar to VeraCrypt, but it's built into the Pro and Enterprise versions of Windows (not the Home versions, though). It does have a checkbox to store your encryption keys in your Microsoft account, but you can just uncheck that if you want to hold the keys yourself.
Please do a video on Next cloud for Beginners 🔥
Awesome work 🔥🔥❤️
Nextcloud is versatile, but even they don't do end-to-end encryption currently. If you are hosting on a VPS, the only secure option I know of is Seafile.
Nice
A question
Do a cloud storage scan your uploaded data with a bot to find copyright music and videos to ban an account?
What are your thoughts about Cryptomator? I didn't find it on the recommended software on the site
Even Nextcloud isn't end-to-end encrypted. They have an add-on, but it's in beta. The only self-hosted solution I found was Seafile. Sadly it's way less versatile than Nextcloud, but at least it's safe, even if my provider were to attack my server.
What about Pcloud?
For cloud , if you are tech savvy ,its not a bad idea to get your own nextcloud server either on localhost machine or to get a proper VPS, OpenVZ servers have problems with nextcloud now for some reasons because of the old kernel , or at least thats how it is for me , i would recommend KVM VPS !
Even Nextcloud isn't end-to-end encrypted. They have an add-on, but it's in beta. The only self-hosted solution I found was Seafile. Sadly it's way less versatile than Nextcloud, but at least it's safe, even if my provider were to attack my server.
@@clumsyjester459 i did the end-to-end on nextcloud , even on beta as you said , tried to download files from the server directly and with root permisions as well , when i opened up my files , it was just gibberish
why not mention cryptomator?
i tried everything you listed but ended up using that because it's the most convenient and the security is fine.
it allows you to use dropbox and all other free cloud services with full encryption
+1 for Cryptomator! I like to use Cyberduck along with it (when on your laptop). Makes it so easy to use.
on Linux, I recommend using CryFS for encrypted cloud storage
Elaborate please.
👍👍
What about synology nas ? is it better than Nextcloud ?
you can use the nas as a host instead of renting a server. It could be cheaper and more secure. you can also expand your storage as much as you want instead of having to pay a pretty penny
My problem is remembering all the passwords set for encrtyped usb drive volumes. Got any tips for that? How to remember passwords without having to store them somewhere and at least keep them all different.
1) What software are you using to encrypt your drives?
2) That is part of the problem. You want to remember all your passwords.
3) I will explain further once you answer the first question.
@@jamesedwards3923full disk encryption that comes with OS at install like Ubuntu. At times also using veracrypt within OS as well.
What about using a service like Boxcryptor?
I do not know if they have been audited. AxCrypt used to be 100% free. Now it has pay tiers. It started as open source. You can still get the 128bit version with limited options is still good.
I would say VeraCrypt, 7zip, Cryptomator, and 7zip. If you want to pick the bare minimal.
Just a follow up statement. Show me an open audit that says it has no back doors. Then I will be more than happy to use it for my most sensitive data.
is veracrypt the successor of truecrypt? it looks the same. i heard truecrypt had security issues and should no longer be used.
it is one of the forks of Truecrypt, yes, but, different developers. (It is up to debate what happened to Truecrypt, as many suspected US Govt. pressure for it to be shutdown precisely because it was near bulletproof...)
@@mdd1963 I have a copy truecrypt in reserve, but veracrypt does have a truecrypt mode. I have just about migrated all my old data to veracrypt anyway.
Think about your post for a minute. TrueCrypt is open source. As is VeraCrypt. So if what you say is true. That tells you they took it apart. Put it back together again. Yet still could not find significant flaws. Tells me they did good work.
I have to check to make sure my version of TrueCrypt is clean.
More importantly if you read creditable sources online. The program is sound, but progression has stopped. So any flaws known or unknown will not be mitigated or resolved.
You should keep a copy of TrueCrypt just in case. I know I did. However, VeraCrypt should be used. Migrate your data from TrueCrypt to VeraCrypt. You need to be careful when doing this. If you screw up you can currupt the data. I speak from direct experience on this.
I personally recommend creating a new volume. Then as both are open. Transfer from the old TrueCrypt to the New VeraCrypt Volume. Again, it works fine if you use VeraCrypt to open the file. I say just keep it simple if the data can not be replaced.
what about pcloud..?
Encrypting them locally will always be better than a service provided by the provider. It depends on how much you trust the service. Try Cryptomator + any cloud storage.
Spider Oak?
You did not mention them at all.
What about encrypting files on android phones?
And iPhone ?
Many archiving applications will handle the ZIP password. There’s EDS for veracrypt on Android
@@techlore Thank you so much 😄👍
You would have to use some sort of third party application.
Like a .zip or .7zip program. Or use something like boxcryptor. I do not know of any independent audits saying it has no back doors. AxCrypt was initially open source. So I would trust them, however things change. Coming from a guy who believes in open source. If I had to get through a pay wall. I want to know that there are no back doors. The free version is 128bit and you have to have an application installed on your device.
Make sure you encrypt your device and your MicroSD card.
NordLocker??
Please for the love of god, no.
@@techlore I don't personally use locker but I thought it was secure, what's wrong with it?
Mostly relying on a closed ecosystem paid product when you have endless free and trusted options available to you. Password managers and encryption should generally be handled by FOSS and open platforms in our view.
Ultimately, Nordlocker is arguably better than nothing.
What happened to SR series?
Epic
Yeehaw
It’s your bedtime
@@techlore School for me starts at 8am. In 3 hours I gotta wake up :D
I use truecrypt. I found veracrypt to be slow especially with larger files.
I have had the same problem and eventually moved to sync[dot]com which is a great balance between security and convenience.
Spideroak and Nordlocker are zero knowledge cloud backup services.