NAOMI is doing a invaluable public service. This is some great information. I'm not really tech savvy but she makes things understandable. Thank you, NAOMI
I wold like to use a one time pad with a freebie cloud service like google drive lol, within a zip file that has no encryption added to it other then to use something dumb like 1234 as a password for that part... I having been looking for software that will let me use a one time pad with a computer and found some rather old stuff or I can do it by hand but it would take too long. Do you know of anything I can use? I intend to take all my files and zip them and then use an OTP as if they can decrypt that lol they can keep the data as this would be a test and the files would be old work files from a computer I got from a company that went out of business... also if I can find something that compresses way better then zip I will try that instead but zip is just an example as everyone should know what a zip file is.
Naomi, one thing that you have done on some of your videos is during your summation, you tell what your personal preference is and why. This is important because there's only so much time you can spend going through all the details of every option you present in a video. So your personal preference may be based not just on the 'best' on paper but what your overall user experience is like with your personal choice. Thank you so very much for all you do!
I started using Linux almost completely a few weeks ago, and this video has made me even happier that I chose MEGA as my main cloud storage. I absolutely freakin love them, and I'm glad it's a private service that just WORKS from any device. Thank you Naomi. Great content as usual
I wouldn't trust MEGA. They've had some serious issues and breaches in the past. Other than hosting yourself with Nextcloud I can only recommend Proton Drive.
@@battlezordfalcon I have used Mega since Mega Ltd began (post Megaupload) I have never had a sync problem. They had a bug in their Linux client once and responded within an hour to my bug report . Within 24 hours they provided me with a revised .deb to install a new version. They have always had a new version ready for my Linux distro before the distro is released. Google drive still does not have a Linux client.
I absolutely love this channel. I've been a Firewall Engineer for many years and seen great progress with NG firewalls that can detect and block software and protocol behavior that's outside of normal behavior. That's just one thing they can do. I've learn so much and am very security minded, so your channel is great information to me. Thanks so much for all you bring to us with videos like this one.
Currently using Proton. Although it may not be as convenient as some providers I trust them. The offering of a complete email, storage, VPN and calendar solution across my laptop and phone is fantastic.
WHY do you trust them? I don't trust any provider that hands over customer info to law enforcement. I agree with the convenience side of things, I have used them since 2014 with paid services. These types of systems tend to be seen as havens for people with something to hide, so a great target. What if Protonmail, Tutanota and Skiff were honeypots like most of the VPNs that collect all your data, profile you and sell it on or manipulate it. People seem to trust based on how often they hear a name or how good a product is to use. That says nothing about what they are doing in the background.
I've used Box for years. It amazes me that I rarely hear about. They have just as or more features than most and have high enterprise usage. A free personal account includes many features and 5 GB storage.
Currently swapping over to Proton so glad to hear that they are focusing on improving things! Even in the last few months, the App is working good, slowish but good! I'm happy with it so far and look forward to the pre-view icons soon for files
Lol as soon as you start using Proton you are screaming from the rooftops that you have something to hide and hackers and 3 letter agencies will target you.
Great video! If you haven't done so already, I think posting a video discussing usage of a Microsoft account on Windows and how files are automatically stored in OneDrive would be good. I setup a new computer running Windows 11 and decided to try using a Microsoft account instead of "fighting it" and found Microsoft really goes out of its way to grab your data. I found a OneDrive setting where I could control which folders *on* OneDrive would and would not be synchronized to the local system but could *not* find a way to prevent files created locally from being synchronized to OneDrive, unless the file was saved to a spot not monitored by OneDrive locally. I disconnected OneDrive from the local system and found as soon as I saved a photo to the "Pictures" folder, the OneDrive connection was automatically restored. So, I think it would (or at least might) be useful to explain how usage of a Microsoft account can impact your ability to keep private or confidential files private or confidential.
I've only recently discovered your channel, and it's so full of high quality content, that I'm gradually trying to catch up on all the previous videos (like some tv series serious addict!). 😂 Thank you so much, Naomi, for your reviews and insights on platforms, app, OS's, and the whole privacy-related lot! 😎
Naomi, I had found your channel only recently and am quite impressed by the quality information you are giving through your videos. I saw a bunch of your videos and absolutely loved it. I hope that you get lots of subscribers while maintaining this level of quality videos!!
NAOMI! Thank you for exposing the masses to everything we could have easily overlooked. You go beyond exposing, but you provide alternatives and options for us. You are AMAZING 👏 🧠😃 Edit: And you present the information in an interesting and sometimes amusing manner. You're a nerd with style 😁
Impressed... always watch your videos. The most helpful, detailed, well organized, best presented I have seen anywhere! Appreciate your work and dedication. Thank You!
Your educational videos are awesome!. Really appreciate everything! Just bought your eBook to learn more about different topics. I am trying to leave OneDrive (I use the vault and thought it was encrypted end-to-end) and move to iCloud since I am moving to their ecosystem. However moving to an alternative is difficult if lacking the auto-save, or the creation of a folder in your computer file system. But I will give it a try to Proton since they now have a plan that includes mail, cloud, VPN, etc.. price competitive in my point of view. Again, thank you!
I don't use any cloud storage, but found the idea of skiff quite appealing so have downloaded the suite and am testing out the free version. The mail is quite good actually, allowing for 4 aliases too.
Don't forget that your mail goes between Skiff and all other providers in *PLAIN TEXT* as all email does. There is no agreement between companies for encrypting the transfer of it. It is certainly NOT end2end encrypted as how would a random person or company you deal with obtain a secure key to use in order to encrypt and exactly what client would they use! Your email on SKIFF is only encrypted in transit between your PC or phone and their system. Exactly the same as Tutanota and Protonmail. I used to get emails from people stating their email was safe as it was encrypted - it wasn't, it arrived in plain text and certainly was not decrypted by anything I have. This is why people need to really understand how systems work. Never rely on companies selling a product or wanting to scrape data either, they say what you want to hear. If you have something to hide, want to keep info private or live in a country that might throw you in a prison for speaking out, do not use these free encrypted email services thinking they protect you.
Also note: One can simply use their own client-side encryption software (several excellent open-source options available) before transferring data to any cloud provider. Less convenient, perhaps, but then one has no doubt whatsoever about privacy.
Yes, I agree. If you're performing your own encryption you can absolutely secure your data against snoops of all kinds so it would take them a couple of lifetimes to break the encryption, and by then you wouldn't care anyway.
I love Naomi, her enthusiasm and her knowledge that illuminates me! I used pCloud for a couple of years but lately I had an epiphany. Since I only use Apple devices, I now manage all my files with Devonthink.
Good stuff Naomi. Look forward to the follow up video of Cryptomator / Boxcryptor. Also very happy about Apple upgrading their iCloud security as I moved off of Google products at the end of last year and now have an iPhone, although I did look into other solutions I felt in the long run Google-based phones were just not worth it anymore even with alternative OSes.
Very good review, Naomi. My takeaway is that I trust none of them with my data. If I were to ever use one of their services, security would not be an issue, because I would manually encrypt my files, locally, before uploading them anywhere. That makes it a bit inconvenient. But that is the nature of the beast. Trust no one else with the privacy and security of your data. Encrypt it yourself, and you can uploaded it without worries.
Hello Naomi! Could you please do a subvideo focused on storing only photos and videos to cloud? I would like to know the most private photo storage services as well since I’m sure many people have an excess amount of these. Thank you for creating content on taking back our privacy!
I'd say Proton is the best because of their overall ecosystem for amazing convenience. You not only get their drive, but also get their email, calendar, and VPN, all accessible from the email. So nice.
Great video but slightly odd that the recent MEGA vulnerability exposed by Swiss security researchers wasn't mentioned. The gist of it is that any user who has logged in more than 512 times into MEGA is theoretically at-risk. Quote: > Due to the flawed integrity protection, a malicious service provider can recover a user’s private RSA share key (used to share file and folder keys) over 512 login attempts. The number is 512 because of the RSA-CRT implementation used by MEGA clients to build an oracle that leaks one bit of information per login attempt about a factor of the RSA modulus > An attacker would need to have control over MEGA’s API servers or TLS connections without being noticed to perform any of these attacks. MEGA patched part of the problem but a large part remains unaddressed since the weakness derives from the security architecture of the platform and would be a large undertaking to fix.
I'm sad that there was no mention of nextcloud, so I checked out if there had e2e encryption and it seems like you can activate e2e on individual folders, but it's not using e2e by default
Good overview, but I think you should have stressed that end-to-end encryption can be useless wrt to security, if the cloud system provides an application in the form of an executable allowing you to enter your password, and you use that. Even if that application is open source, the compiled version can easily include some code that uploads your password, with all the traffice your never notices a few bytes extra. Such an application can dynamically/temporarily load updates to include such functionality, so someone having checked a binary doesn't say much. If you want security, encrypt on your system separately from the cloud storage (e.g. running in a VM without access to directories with non-encrypted data), don't run **any** software on your computer from companies you don't trust, as it doesn't make sense to edit your files with Microsoft Word but not use One Drive because you don't trust it (same with using Chrome resp Google Drive). If something is convenient, it is unlikely to be secure. Convenience is leaving your front door unlocked, so you don't have to search for your keys when you come home loaded with groceries.
Remember, kids, the "cloud" is just a fancy way of saying someone else's computer storage. Buy a NAS & store your own private data on your property. Don't rely on encryption, it either has a backdoor or can be brute-forced by entities with enough resources.
@@Apeiron242 That's your problem because you don't understand the concept of redundancy, physical backups on different media placed in different locations and plain commonsense security awareness. Now go and make the big private tech companies & the NSA happy by being a good little customer.
I watched all the way through to the end. I was disappointed by the surprise 😂👍 So many options that I may take awhile deciding which one works for me 🤔 The boxcryptor one sounds like a good all rounder though 😃
Another great video... thanks Team... A point about CSAM scanning on Apple products... my understanding was that it hasn't necessarily been 'scrapped' ... more postponed...
Over a year to this video & Skiff closed, Mega I think had some issues and your dressing has changed 😊. Need an updated video including some names mentioned in comments like Filen, icedrive, etc. wearing your new merch. Also if possible mention a couple of lines on difference in types of encryption & which is important along with where is the data stored & how is that important. Thanks.
You did good research on these storage options, well done.👍 I personally wouldn't trust (Apple icloud) Mega is a good choice and Crytomator Vaults for any other closed-source untrusted storage options. (Thanks for the video)
The "cloud" is just a word for "somebody elses computer", a computer over which you have no access or security controls. If it's private, keep it on your computer, properly secured, which pretty much these days amounts to unplugged locked in a Faraday cage. If it's really private it's best kept completely isolated from the Internet.
18:45 The point that we’re trusting Apple for client side encryption is something I’d like to find independent auditing for. Otherwise this would be a great trick to harvest data people thought was inaccessible.
@@NaomiBrockwellTV I agree. Apple iCloud users are part of an easy to use ecosystem with a huge growing membership, that’s a significant difference to other client side encryption services.
@@NaomiBrockwellTV No no no, that should be applied to all platforms regardless of whether they're closed source or opensource. You're one of the trustworthy, accurate privacy youtubers. I'd hate to see you get consumed by an ideological narrative. Opensource without auditing, or atleast community code & testing is opensource wasted. Blind belief & careless of shifting responsibility like "someone would have seen the source code" are the diabetes of opensource lol. Trust but verify commrade!.
If there is something in the background of your pic, they alter it. Whether it is inside your device, or online. New rules, we aren't aware of yet. National Security of course.
20 years ago I used to store a non Google/MS big cloud storage. Then it went bankrupt and I lost *_all_* my files in an instant. Privacy is important yes, but it means nothing if everything you had backed up is lost from one moment to the next. Never will I use a non-monopolist again
Honestly, yeah, that's a good point. I feel like in this regard, MEGA and Proton Drive (iCloud as well if you have access to it) are probably the safest E2E encrypted services to use because they have strong brand recognition behind them and aren't gonna just disappear one day, or at least not without a lot of warning.
@@therealb888 ellipse or something - or maybe it was called sth like odrive? 🤔 I don't know anymore - it was 20 years ago and I remember the name gave me a feeling of something elliptical and a few years later I lost photos when photobucket deciced to, without notice (at least non that I saw), rigorously go cencorise all data that it's users had backed up there
Buy your own domain, then create two safe email accounts (eg. Proton and Tuta), then use AnonAddy or SimpleLogin with your domain and forward all important mails to both accounts. There is no way that both of them dissapear in the same time.
A good strong password needs a lot of entropy, which is information content. We put that in by using a method that puts in a lot of randomness. It's not a good idea to let the user pick a password and have the machine try to say whether it's good, as there may be a kind of non-randomness that the check misses but a future hacker finds. Instead, the machine should generate the password (strictly on the client side, on your machine and not on their server).
The one time payment that pCloud offers is super appealing to me. So rare to see a service that doesn't do a subscription based plan. Obviously I'm not gonna store anything sensitive on a cloud, but for videos and music? No brainer.
I actually use Proton. Switched over to them a few years ago for email, and I’ve been slowly migrating other functions from the various services that I use over to Proton as they become viable.
@@pb6096 That is the general way that app E2E communications platforms work. I moved over to Proton when they were just “ProtonMail”, mainly because they weren’t Google. I was starting to have reliability issues with my Gmail account. Now, Proton offers a VPN service (which I do use), an encrypted cloud storage solution, and they just launched their encrypted Calendar.
Very informative video! Ahhh darn it I watch a handful of videos on this and think I made up my mind... and then "bam!" I changed my mind again haAaAAa. Got to pick between these 4 for me. - iDrive - pCloud - Proton - Sync Has to have e2e encryption and I want to sync encryption from my Windows laptop and x2 Android phones. Hm which one though???
Thanks for this thorough review of the different available services. I'm always gnashing my teeth over this as I'm trying to balance privacy with convenience for my family who aren't that concerned about privacy. The iCloud one is very interesting here because that could be the sweet spot for our (and I suspect many other people's) family.
You seem to me the queen of our current gen security and privacy with ease and more understandably.. I use Redmi phone and disabled google services using network blocker and also freeze apps which can also further stop the security and privacy. I just hate how these days our data has become available to others easily and law and enforcement can just ask the providers and easily get access even when doubt in anyone just looking. Same time we've things like Mega and others which block that path. Please continue to enlighten with your experiences for more user focused secure ways. I'm deleting all my photos and videos from google and moving out of google platforms using maybe Graphene like you said in other videos. I think mega would be still good. But more better would be your own NAS drive which you can control with ease I believe.
When I watch your videos I feel like Neo in The Matrix when he downloads kung fu straight to his brain! Your videos are amazingly thorough and streamlined. Thank you and keep up the good work! A+++ ♥
I encrypt my files with age file encryption, and than upload the files to the cloud, I used asymmetric keys, I only create the private key on the encrypted pen drive. And use the public key inside the script to encrypt the files and than upload to the cloud! I use rclone to upload to the cloud! It free and open source! 😊
Good thought provoking video I have noticed since I started paying for Google products that I get almost zero advertising anymore. That's one big coincidence. Gives value to the thought that you get what you pay for.... Be interested to learn more about that if anyone has any thoughts on that connection. I have an issue when I hear people use the excuse that it's open source so it must be safer etc....Very few people will actually read the code in it's entirety, and how many will actually understand the code (not the comments in the code) so you are essentially still putting your trust in other people who you don't know. And if it's free...any cyber knowledgeable person will tell you that free comes at a cost (usually the use of your personal information)
Not so private if you email anyone outside Skiff or anyone emails you from outside. The way email works is transfer in plain text between providers. They have misled people and tried to change industry wide and dictionary definitions of what E2E really is to sell a product. It is completely unacceptable as it puts activists at risk if they think this somehow secures email communications between them and others. Skiff has lied about email being E2E encrypted when they really mean Client2Server Encrypted or EIT, Encrypted in Transit between your PC/Phone to their servers.
Wow! Very comprehensive list of cloud services! Great job Naomi! For me, I'm fine with using my own NAS for accessing my files over the Internet. Cute dance. I wish you did M3gan's dance instead though... 🤪
Naomi, you introduced me on a Davos stage. We were the only gingers there. I love what you've done since then. Hey everybody, listen to her. She's smarter than me.
@@NaomiBrockwellTV I spoke about why Ethereum's smart contract feature made it possible to help authors get paid. There was a woman novelist in Romania who could not get paid for her novels because Romania took all her money. Happy ending, she eventually escaped to London and gets paid by regular publishers now. An example of why I get out of bed each morning. My oldest saying that my sister remembers well, is "Listen to the women."
I run my 2 x QNAP NAS with 4+ Disks each, I have a 2nd QNAP in my garage which is a separate building and I use rsync to sync them up daily. All encrypted and away from prying eyes. If I have a natural disaster it is all gone, if I have time to leave I will grab my NAS devices and put them in my car.
I cannot believe in era of short video dominance in youtube I watched whole 30 minutes without skipping.
yay!! hope it was helpful and enjoyable!
Every time!
NAOMI is doing a invaluable public service. This is some great information. I'm not really tech savvy but she makes things understandable.
Thank you, NAOMI
I concur - the 2010 hairstyle is hard to watch though.
She’s outta your league pal, so better get the sock out😂
absolutely, but the first time I've had to slow down the playback speed on a TH-cam - I usually speed up, so she must be just right. Content rich!
@@globoliver9697this is not a 2010 hairstyle, you were just born that year. I love her hair 😍
Chapters:
00:00 Intro
01:00 Privacy Concerns
02:30 Understanding Different Types of Encryption
05:11 Google Drive
09:22 Dropbox
13:00 Microsoft One Drive
14:32 Skiff
16:25 iCloud
19:14 MEGA
22:11 pCloud
24:48 Proton Drive
26:21 Sync .com
28:00 Tresorit
29:14 Cryptomator and Boxcryptor
29:38 Conclusion
,😂
Very valuable video👍🏻. Can you make one about NAC server storage like synology and how safe and private they are. Thanks
@@ProfessorTicks nas*
@@vrindavanbokde start with a two bay 2’5 ssd raid 1 and plug it into the router USB port, I learnt the hard way of not having a nas 😂
I wold like to use a one time pad with a freebie cloud service like google drive lol, within a zip file that has no encryption added to it other then to use something dumb like 1234 as a password for that part... I having been looking for software that will let me use a one time pad with a computer and found some rather old stuff or I can do it by hand but it would take too long. Do you know of anything I can use? I intend to take all my files and zip them and then use an OTP as if they can decrypt that lol they can keep the data as this would be a test and the files would be old work files from a computer I got from a company that went out of business... also if I can find something that compresses way better then zip I will try that instead but zip is just an example as everyone should know what a zip file is.
Naomi, one thing that you have done on some of your videos is during your summation, you tell what your personal preference is and why. This is important because there's only so much time you can spend going through all the details of every option you present in a video. So your personal preference may be based not just on the 'best' on paper but what your overall user experience is like with your personal choice.
Thank you so very much for all you do!
I started using Linux almost completely a few weeks ago, and this video has made me even happier that I chose MEGA as my main cloud storage. I absolutely freakin love them, and I'm glad it's a private service that just WORKS from any device.
Thank you Naomi. Great content as usual
I wouldn't trust MEGA. They've had some serious issues and breaches in the past. Other than hosting yourself with Nextcloud I can only recommend Proton Drive.
🇨🇳🤣
Mega has transfer limits and their sync messes up, Google was the fastest and offer 15gb but come with nsa surveillance
@@battlezordfalcon I have used Mega since Mega Ltd began (post Megaupload)
I have never had a sync problem.
They had a bug in their Linux client once and responded within an hour to my bug report . Within 24 hours they provided me with a revised .deb to install a new version.
They have always had a new version ready for my Linux distro before the distro is released.
Google drive still does not have a Linux client.
Just use tresorit
I absolutely love this channel. I've been a Firewall Engineer for many years and seen great progress with NG firewalls that can detect and block software and protocol behavior that's outside of normal behavior. That's just one thing they can do. I've learn so much and am very security minded, so your channel is great information to me. Thanks so much for all you bring to us with videos like this one.
Thanks so much for watching!
Lol you have given your firewall company complete access to every part of your file system. 😂
Delete TH-cam if this Queen ever leaves 😢
one of the few people i use youtube for
Or watch TH-cam with "NewPipe"
Use newpipe instead of yt 😎
Agreed
@@MrDormant She's on Odysee
Currently using Proton. Although it may not be as convenient as some providers I trust them. The offering of a complete email, storage, VPN and calendar solution across my laptop and phone is fantastic.
WHY do you trust them? I don't trust any provider that hands over customer info to law enforcement.
I agree with the convenience side of things, I have used them since 2014 with paid services.
These types of systems tend to be seen as havens for people with something to hide, so a great target.
What if Protonmail, Tutanota and Skiff were honeypots like most of the VPNs that collect all your data, profile you and sell it on or manipulate it. People seem to trust based on how often they hear a name or how good a product is to use. That says nothing about what they are doing in the background.
Don’t fully trust them, they’re better than some but there’s stuff out there by Mental Outlaw that shows they’re not as secure and benign as you think
Proton has WEF woman rep on their board now.
@ea1255Linux on a computer is less secure than a phone. Phone is built with security from the ground up. Different design. Use grapheneOS
I've used Box for years. It amazes me that I rarely hear about. They have just as or more features than most and have high enterprise usage. A free personal account includes many features and 5 GB storage.
MEGA has been really good to me. Zero complaints and offers a native Linux client
Feb 24: Skiff died. Glad IPFS is still out there. NB, you might want to pin this.
Currently swapping over to Proton so glad to hear that they are focusing on improving things! Even in the last few months, the App is working good, slowish but good! I'm happy with it so far and look forward to the pre-view icons soon for files
Lol as soon as you start using Proton you are screaming from the rooftops that you have something to hide and hackers and 3 letter agencies will target you.
Great video! If you haven't done so already, I think posting a video discussing usage of a Microsoft account on Windows and how files are automatically stored in OneDrive would be good. I setup a new computer running Windows 11 and decided to try using a Microsoft account instead of "fighting it" and found Microsoft really goes out of its way to grab your data. I found a OneDrive setting where I could control which folders *on* OneDrive would and would not be synchronized to the local system but could *not* find a way to prevent files created locally from being synchronized to OneDrive, unless the file was saved to a spot not monitored by OneDrive locally. I disconnected OneDrive from the local system and found as soon as I saved a photo to the "Pictures" folder, the OneDrive connection was automatically restored. So, I think it would (or at least might) be useful to explain how usage of a Microsoft account can impact your ability to keep private or confidential files private or confidential.
I've only recently discovered your channel, and it's so full of high quality content, that I'm gradually trying to catch up on all the previous videos (like some tv series serious addict!). 😂 Thank you so much, Naomi, for your reviews and insights on platforms, app, OS's, and the whole privacy-related lot! 😎
"This is the dance that you get to see if you watch to the end " - love it!!
🤣🤣🥰
I was not expecting this video to he so comprehensive and informative. Subscribed straightway!!!
Welcome! and thanks for watching!
Naomi, I had found your channel only recently and am quite impressed by the quality information you are giving through your videos. I saw a bunch of your videos and absolutely loved it.
I hope that you get lots of subscribers while maintaining this level of quality videos!!
Thanks for your kind words!
@@NaomiBrockwellTV 😊
NAOMI! Thank you for exposing the masses to everything we could have easily overlooked. You go beyond exposing, but you provide alternatives and options for us. You are AMAZING 👏 🧠😃
Edit: And you present the information in an interesting and sometimes amusing manner. You're a nerd with style 😁
Velma from scooby
How could you overlooked the fact that your dumb and anything online is not safe
Appreciate your discussions of security topics. They are very helpful.
Impressed... always watch your videos. The most helpful, detailed, well organized, best presented I have seen anywhere! Appreciate your work and dedication. Thank You!
Your educational videos are awesome!. Really appreciate everything! Just bought your eBook to learn more about different topics. I am trying to leave OneDrive (I use the vault and thought it was encrypted end-to-end) and move to iCloud since I am moving to their ecosystem. However moving to an alternative is difficult if lacking the auto-save, or the creation of a folder in your computer file system. But I will give it a try to Proton since they now have a plan that includes mail, cloud, VPN, etc.. price competitive in my point of view. Again, thank you!
Thanks for your support and I hope you enjoy it!
Don't sign up from home or work and don't use a credit card or paypal !
Thanks!
Damn, the first thing that I noticed is the audio quality, really good and clear. 👍👍👍
You consistently provide really good and professionally delivered material. Credit to you.
Important Update: New Storage Policy for Google Drive
th-cam.com/video/XZU5Ir7WnZA/w-d-xo.html
thank you for the quality of your content, I just devored 3 vid. so far you made me Happy. Long life to your channel !
welcome!
Naomi never fails us!😄💕
I don't use any cloud storage, but found the idea of skiff quite appealing so have downloaded the suite and am testing out the free version. The mail is quite good actually, allowing for 4 aliases too.
Don't forget that your mail goes between Skiff and all other providers in *PLAIN TEXT* as all email does. There is no agreement between companies for encrypting the transfer of it. It is certainly NOT end2end encrypted as how would a random person or company you deal with obtain a secure key to use in order to encrypt and exactly what client would they use!
Your email on SKIFF is only encrypted in transit between your PC or phone and their system. Exactly the same as Tutanota and Protonmail. I used to get emails from people stating their email was safe as it was encrypted - it wasn't, it arrived in plain text and certainly was not decrypted by anything I have.
This is why people need to really understand how systems work. Never rely on companies selling a product or wanting to scrape data either, they say what you want to hear.
If you have something to hide, want to keep info private or live in a country that might throw you in a prison for speaking out, do not use these free encrypted email services thinking they protect you.
Naomi, You made it worth watching all the way to the end! 😁
:)
Compliment also for the color scheme, clothing and even the hair form one whole with the scene. This has been well thought out. 👍🏻
Great video Naomi! Dropbox is so much more expensive than other cloud storage providers. I don't understand why it's so popular, frankly.
its easy to use, reliable, and available on every platform, to name a few
Also note: One can simply use their own client-side encryption software (several excellent open-source options available) before transferring data to any cloud provider. Less convenient, perhaps, but then one has no doubt whatsoever about privacy.
Yes, I agree. If you're performing your own encryption you can absolutely secure your data against snoops of all kinds so it would take them a couple of lifetimes to break the encryption, and by then you wouldn't care anyway.
@@violet_world9385 Thanks. I learnt something new. Will check it out.
@@gebali For online encryption Cryptomator is better than Veracrypt
I never tried this, create your own folder and place all your work resume stuff on it?
I love Naomi, her enthusiasm and her knowledge that illuminates me! I used pCloud for a couple of years but lately I had an epiphany. Since I only use Apple devices, I now manage all my files with Devonthink.
Thank you for the excellent analysis, Naomi! It would be great to compare the NAS option to cloud storage.
Good stuff Naomi. Look forward to the follow up video of Cryptomator / Boxcryptor. Also very happy about Apple upgrading their iCloud security as I moved off of Google products at the end of last year and now have an iPhone, although I did look into other solutions I felt in the long run Google-based phones were just not worth it anymore even with alternative OSes.
I thought the video was perfect due to the great presentation on a wide variety of Cloud options until I saw the dance... that made my day, thanks!
😂💛
Excellent video needs to be shared far and wide.
Very good review, Naomi.
My takeaway is that I trust none of them with my data.
If I were to ever use one of their services, security would not be an issue, because I would manually encrypt my files, locally, before uploading them anywhere.
That makes it a bit inconvenient. But that is the nature of the beast.
Trust no one else with the privacy and security of your data. Encrypt it yourself, and you can uploaded it without worries.
I think that's a great solution for people willing to put in the effort, and will be covering that solution in a future video!
you're doing an amazing work in informing people about all this! Great dance moves too!
I watch with such a high every video that you make about privacy and security !
Greetings from Sofia, Bulgaria.
Thanks for watching!
Can't help notice your Rothbard's 'Anatomy of the state' at the back. Thanks for sharing.
Ah, I didn’t notice that. I know who he is.
Yes, comprehensive and thank you for introducing to Skiff drive 😎
Hello Naomi! Could you please do a subvideo focused on storing only photos and videos to cloud? I would like to know the most private photo storage services as well since I’m sure many people have an excess amount of these. Thank you for creating content on taking back our privacy!
I'd say Proton is the best because of their overall ecosystem for amazing convenience. You not only get their drive, but also get their email, calendar, and VPN, all accessible from the email. So nice.
Incredible review and great job as always. Luv you.
Very informative and helpful. You reminded me today to maximize my proton account. Thank Naomi!
I shared your channel with my colleagues. They like it!
Awesome - thanks so much for sharing!
Love this channel! A remake of this video is needed to include iCloud, just to know how secure and private it is and if it’s a good option.
this will have some helpful info for you: th-cam.com/video/uLPG-KF3GAc/w-d-xo.html
Another informative and useful video, great work Naomi.
Incredible review. I was surprise not to see Idrive on the review
Great video but slightly odd that the recent MEGA vulnerability exposed by Swiss security researchers wasn't mentioned. The gist of it is that any user who has logged in more than 512 times into MEGA is theoretically at-risk. Quote:
> Due to the flawed integrity protection, a malicious service provider can recover a user’s private RSA share key (used to share file and folder keys) over 512 login attempts. The number is 512 because of the RSA-CRT implementation used by MEGA clients to build an oracle that leaks one bit of information per login attempt about a factor of the RSA modulus
> An attacker would need to have control over MEGA’s API servers or TLS connections without being noticed to perform any of these attacks.
MEGA patched part of the problem but a large part remains unaddressed since the weakness derives from the security architecture of the platform and would be a large undertaking to fix.
Interesting I didn't actually know about this, I'll do more digging!
360 degree eye view . Thank you for the summary of the tools
Thank you so much. This is exactly what Im looking for. You're a lifesaver.
Love your channel, as I always learn from your videos.
I'm sad that there was no mention of nextcloud, so I checked out if there had e2e encryption and it seems like you can activate e2e on individual folders, but it's not using e2e by default
Good overview, but I think you should have stressed that end-to-end encryption can be useless wrt to security, if the cloud system provides an application in the form of an executable allowing you to enter your password, and you use that. Even if that application is open source, the compiled version can easily include some code that uploads your password, with all the traffice your never notices a few bytes extra. Such an application can dynamically/temporarily load updates to include such functionality, so someone having checked a binary doesn't say much.
If you want security, encrypt on your system separately from the cloud storage (e.g. running in a VM without access to directories with non-encrypted data), don't run **any** software on your computer from companies you don't trust, as it doesn't make sense to edit your files with Microsoft Word but not use One Drive because you don't trust it (same with using Chrome resp Google Drive).
If something is convenient, it is unlikely to be secure. Convenience is leaving your front door unlocked, so you don't have to search for your keys when you come home loaded with groceries.
Remember, kids, the "cloud" is just a fancy way of saying someone else's computer storage. Buy a NAS & store your own private data on your property. Don't rely on encryption, it either has a backdoor or can be brute-forced by entities with enough resources.
Cool, now my valuable data can go up in smoke or be stolen by someone with a backpack.
@@Apeiron242 That's your problem because you don't understand the concept of redundancy, physical backups on different media placed in different locations and plain commonsense security awareness. Now go and make the big private tech companies & the NSA happy by being a good little customer.
Yes spot on 🎯. You said what I was thinking
Great video I'm gonna try out skiff in was wondering about them for a while.
Informative video, my first-time hearing about a private cloud.
I watched all the way through to the end. I was disappointed by the surprise 😂👍 So many options that I may take awhile deciding which one works for me 🤔 The boxcryptor one sounds like a good all rounder though 😃
Unfortunately I don't believe boxcryptor is still an option. They were brought out by dropbox a few months ago and are no longer taking new customers.
What about self hosting ? Do we trust Synology ? How do these compare to your excellent presentation so far ?
Another great video... thanks Team...
A point about CSAM scanning on Apple products... my understanding was that it hasn't necessarily been 'scrapped' ... more postponed...
Good stuff. Thanks for posting these
7zip your files with AES 256 encryption before uploading it to the cloud :)
NSA skeleton key
Not only taking less storage space, but should give you the upper hand in the matter. 🎉🎉
I wish they covered NextCloud in this video, would love a privacy review of NextCloud
This is my new favorite channel
Over a year to this video & Skiff closed, Mega I think had some issues and your dressing has changed 😊. Need an updated video including some names mentioned in comments like Filen, icedrive, etc. wearing your new merch.
Also if possible mention a couple of lines on difference in types of encryption & which is important along with where is the data stored & how is that important. Thanks.
You did good research on these storage options, well done.👍 I personally wouldn't trust (Apple icloud) Mega is a good choice and Crytomator Vaults for any other closed-source untrusted storage options. (Thanks for the video)
"Crytomator Vaults for any other closed-source untrusted storage options"
Yes!! Cryptomator is great
The "cloud" is just a word for "somebody elses computer", a computer over which you have no access or security controls. If it's private, keep it on your computer, properly secured, which pretty much these days amounts to unplugged locked in a Faraday cage. If it's really private it's best kept completely isolated from the Internet.
18:45 The point that we’re trusting Apple for client side encryption is something I’d like to find independent auditing for. Otherwise this would be a great trick to harvest data people thought was inaccessible.
That could be applied to all of the closed source platforms we mention tho
@@NaomiBrockwellTV I agree. Apple iCloud users are part of an easy to use ecosystem with a huge growing membership, that’s a significant difference to other client side encryption services.
@@NaomiBrockwellTV No no no, that should be applied to all platforms regardless of whether they're closed source or opensource. You're one of the trustworthy, accurate privacy youtubers. I'd hate to see you get consumed by an ideological narrative.
Opensource without auditing, or atleast community code & testing is opensource wasted.
Blind belief & careless of shifting responsibility like "someone would have seen the source code" are the diabetes of opensource lol.
Trust but verify commrade!.
If there is something in the background of your pic, they alter it.
Whether it is inside your device, or online.
New rules, we aren't aware of yet.
National Security of course.
AWESOME VIDEO! Thanks Naomi!
20 years ago I used to store a non Google/MS big cloud storage. Then it went bankrupt and I lost *_all_* my files in an instant. Privacy is important yes, but it means nothing if everything you had backed up is lost from one moment to the next. Never will I use a non-monopolist again
Honestly, yeah, that's a good point. I feel like in this regard, MEGA and Proton Drive (iCloud as well if you have access to it) are probably the safest E2E encrypted services to use because they have strong brand recognition behind them and aren't gonna just disappear one day, or at least not without a lot of warning.
Which provider was that?
@@therealb888 "Which provider was that?"
That same. Normally even in bankruptcy they give time to download the information
@@therealb888 ellipse or something - or maybe it was called sth like odrive? 🤔 I don't know anymore - it was 20 years ago and I remember the name gave me a feeling of something elliptical and a few years later I lost photos when photobucket deciced to, without notice (at least non that I saw), rigorously go cencorise all data that it's users had backed up there
Buy your own domain, then create two safe email accounts (eg. Proton and Tuta), then use AnonAddy or SimpleLogin with your domain and forward all important mails to both accounts. There is no way that both of them dissapear in the same time.
Great information video Naomi
A good strong password needs a lot of entropy, which is information content. We put that in by using a method that puts in a lot of randomness. It's not a good idea to let the user pick a password and have the machine try to say whether it's good, as there may be a kind of non-randomness that the check misses but a future hacker finds. Instead, the machine should generate the password (strictly on the client side, on your machine and not on their server).
The one time payment that pCloud offers is super appealing to me. So rare to see a service that doesn't do a subscription based plan. Obviously I'm not gonna store anything sensitive on a cloud, but for videos and music? No brainer.
Powerhouse of a youtube channel; great worK!
Thank you!
I actually use Proton. Switched over to them a few years ago for email, and I’ve been slowly migrating other functions from the various services that I use over to Proton as they become viable.
Great initiative bud make sure both parties have to use proton or else the privacy doesn’t work
@@pb6096 That is the general way that app E2E communications platforms work. I moved over to Proton when they were just “ProtonMail”, mainly because they weren’t Google. I was starting to have reliability issues with my Gmail account.
Now, Proton offers a VPN service (which I do use), an encrypted cloud storage solution, and they just launched their encrypted Calendar.
Very informative video!
Ahhh darn it I watch a handful of videos on this and think I made up my mind... and then "bam!" I changed my mind again haAaAAa.
Got to pick between these 4 for me.
- iDrive
- pCloud
- Proton
- Sync
Has to have e2e encryption and I want to sync encryption from my Windows laptop and x2 Android phones. Hm which one though???
Thanks for this thorough review of the different available services. I'm always gnashing my teeth over this as I'm trying to balance privacy with convenience for my family who aren't that concerned about privacy. The iCloud one is very interesting here because that could be the sweet spot for our (and I suspect many other people's) family.
Excellent video!
You seem to me the queen of our current gen security and privacy with ease and more understandably..
I use Redmi phone and disabled google services using network blocker and also freeze apps which can also further stop the security and privacy.
I just hate how these days our data has become available to others easily and law and enforcement can just ask the providers and easily get access even when doubt in anyone just looking.
Same time we've things like Mega and others which block that path.
Please continue to enlighten with your experiences for more user focused secure ways.
I'm deleting all my photos and videos from google and moving out of google platforms using maybe Graphene like you said in other videos.
I think mega would be still good. But more better would be your own NAS drive which you can control with ease I believe.
When I watch your videos I feel like Neo in The Matrix when he downloads kung fu straight to his brain! Your videos are amazingly thorough and streamlined. Thank you and keep up the good work! A+++ ♥
Naomi - Amazing job and eye opening Video for many for sure.
Another superb video, Naomi. Thanks for making such well researched content. Regards from beautiful, stinking hot Adelaide!
A perfect review! Thank you!
I encrypt my files with age file encryption, and than upload the files to the cloud, I used asymmetric keys, I only create the private key on the encrypted pen drive. And use the public key inside the script to encrypt the files and than upload to the cloud!
I use rclone to upload to the cloud! It free and open source! 😊
Thx for always good content that inspired me taking classes in IT security. Loved the dance too :D
YOU WATCHED TILL THE END!
@@NaomiBrockwellTV always 😇
Good thought provoking video
I have noticed since I started paying for Google products that I get almost zero advertising anymore. That's one big coincidence. Gives value to the thought that you get what you pay for.... Be interested to learn more about that if anyone has any thoughts on that connection.
I have an issue when I hear people use the excuse that it's open source so it must be safer etc....Very few people will actually read the code in it's entirety, and how many will actually understand the code (not the comments in the code) so you are essentially still putting your trust in other people who you don't know. And if it's free...any cyber knowledgeable person will tell you that free comes at a cost (usually the use of your personal information)
What an absolute quality content! Thank you!!
So informative and helpful. Much appreciated 🔒
Advanced data protection on iCloud isn’t available where I live but I hope they roll it out fully everywhere soon
It's being rolled out globally this year, unsure if that mean every country, but hopefully yours is included!
Thank you we shared your channel and made really great decisions
Excellent information. Thank you.
Skiff is built on IPFS, love to see IPFS implemented for privacy
Not so private if you email anyone outside Skiff or anyone emails you from outside. The way email works is transfer in plain text between providers. They have misled people and tried to change industry wide and dictionary definitions of what E2E really is to sell a product. It is completely unacceptable as it puts activists at risk if they think this somehow secures email communications between them and others.
Skiff has lied about email being E2E encrypted when they really mean Client2Server Encrypted or EIT, Encrypted in Transit between your PC/Phone to their servers.
Amazing work!
Wow! Very comprehensive list of cloud services! Great job Naomi! For me, I'm fine with using my own NAS for accessing my files over the Internet.
Cute dance. I wish you did M3gan's dance instead though... 🤪
YOU WATCHED!
@@NaomiBrockwellTV Of course! 😘
Naomi, you introduced me on a Davos stage. We were the only gingers there. I love what you've done since then. Hey everybody, listen to her. She's smarter than me.
Oh fun, what were you speaking about?
Oh, I meant to tell you. That same night, our Ethereum ICO sold out in two hours. It's still working today! Book authors still getting paid.
@@NaomiBrockwellTV I spoke about why Ethereum's smart contract feature made it possible to help authors get paid. There was a woman novelist in Romania who could not get paid for her novels because Romania took all her money. Happy ending, she eventually escaped to London and gets paid by regular publishers now. An example of why I get out of bed each morning. My oldest saying that my sister remembers well, is "Listen to the women."
I run my 2 x QNAP NAS with 4+ Disks each, I have a 2nd QNAP in my garage which is a separate building and I use rsync to sync them up daily. All encrypted and away from prying eyes. If I have a natural disaster it is all gone, if I have time to leave I will grab my NAS devices and put them in my car.
Very informative video, Naomi! Thank you!
Fantastic video, thank you!