Comments on: Your data is YOUR data http://blog.jungledisk.com/2006/05/05/yourdata/ Reliable online storage powered by Amazon S3 Sat, 22 Nov 2008 08:11:46 +0000 http://wordpress.org/?v=2.3.1 By: Jungle Dave http://blog.jungledisk.com/2006/05/05/yourdata/#comment-5 Jungle Dave Sun, 29 Jul 2007 13:45:06 +0000 http://blog.jungledisk.com/2006/05/05/yourdata/#comment-5 The software does allow files to be uploaded unencrypted (and always has), however it does not currently have a feature for making a file or bucket public. This could be done with a 3rd party S3 tool for an ambitious user, but it's not quite a simple task yet. We are still planning on offering that in the future. Regarding the forum issue - there was a DNS change that was causing issues. It's fixed now, but may take a little while to propogate due to DNS caching. The software does allow files to be uploaded unencrypted (and always has), however it does not currently have a feature for making a file or bucket public.
This could be done with a 3rd party S3 tool for an ambitious user, but it’s not quite a simple task yet. We are still planning on offering that in the future.

Regarding the forum issue - there was a DNS change that was causing issues. It’s fixed now, but may take a little while to propogate due to DNS caching.

]]> By: Bill Fruth http://blog.jungledisk.com/2006/05/05/yourdata/#comment-6 Bill Fruth Sun, 29 Jul 2007 08:22:46 +0000 http://blog.jungledisk.com/2006/05/05/yourdata/#comment-6 I don't really need S3 or JD for backup, but would consider it for online storage - to replace MediaMax / Streamload, which seems to be beyond repair. I won't consider testing the service unless I can link to the files on S3 via HTTP. In your FAQ there is the statement "are considering supporting "public" buckets in a future release that will allow you to upload unencrypted files that can be downloaded via standard HTTP", but in this thread xpnctoc wrote on June 16 that he was able to disable JD encryption. So, which is it? One other question - I just found about your service this weekend, and the forum link has been broken each time I've tried. Is this a short term problem? Bill Fruth I don’t really need S3 or JD for backup, but would consider it for online storage - to replace MediaMax / Streamload, which seems to be beyond repair. I won’t consider testing the service unless I can link to the files on S3 via HTTP.

In your FAQ there is the statement “are considering supporting “public” buckets in a future release that will allow you to upload unencrypted files that can be downloaded via standard HTTP”, but in this thread xpnctoc wrote on June 16 that he was able to disable JD encryption.

So, which is it?

One other question - I just found about your service this weekend, and the forum link has been broken each time I’ve tried. Is this a short term problem?

Bill Fruth

]]> By: xpnctoc http://blog.jungledisk.com/2006/05/05/yourdata/#comment-4 xpnctoc Sat, 16 Jun 2007 13:02:17 +0000 http://blog.jungledisk.com/2006/05/05/yourdata/#comment-4 Just to add to what Jungle Dave said, if you're really so uncomfortable with Jungle's encryption, then you could use other backup software. I've found that JungleDisk, when mapping to a drive letter (WinXP), allows other backup software to make/recover backups to/from S3, even if they don't have native S3 support. So you can use any backup software that employs your preferred encryption method. The only thing you have to watch out for is that JungleDisk's encryption seems to interfere with some backup software's index files. Not sure why this should be, but once I disabled JD encryption, the backup software worked fine. But that's OK. My files were still secure because the software was using 448-bit Blowfish encryption, and I don't think I need JD to encrypt the encrypted files. Just to add to what Jungle Dave said, if you’re really so uncomfortable with Jungle’s encryption, then you could use other backup software. I’ve found that JungleDisk, when mapping to a drive letter (WinXP), allows other backup software to make/recover backups to/from S3, even if they don’t have native S3 support. So you can use any backup software that employs your preferred encryption method.

The only thing you have to watch out for is that JungleDisk’s encryption seems to interfere with some backup software’s index files. Not sure why this should be, but once I disabled JD encryption, the backup software worked fine. But that’s OK. My files were still secure because the software was using 448-bit Blowfish encryption, and I don’t think I need JD to encrypt the encrypted files.

]]> By: Jungle Dave http://blog.jungledisk.com/2006/05/05/yourdata/#comment-3 Jungle Dave Sat, 20 May 2006 18:06:55 +0000 http://blog.jungledisk.com/2006/05/05/yourdata/#comment-3 Source code that demonstrates how the encryption is done is available for download on the Jungle Disk downloads page. More specifically, Jungle Disk uses 128-bit RC4 encryption with a unique key per file. I'm not sure why you would consider 128-bit encryption insecure - that is a considered a strong key length for a symmetric algorithm. Note that public key lengths are a different story, and 1024 or 2048 bit is considered the least length for a secure key. Jungle Disk does not use public key encryption. Source code that demonstrates how the encryption is done is available for download on the Jungle Disk downloads page.
More specifically, Jungle Disk uses 128-bit RC4 encryption with a unique key per file. I’m not sure why you would consider 128-bit encryption insecure - that is a considered a strong key length for a symmetric algorithm. Note that public key lengths are a different story, and 1024 or 2048 bit is considered the least length for a secure key. Jungle Disk does not use public key encryption.

]]> By: Taro http://blog.jungledisk.com/2006/05/05/yourdata/#comment-2 Taro Sat, 20 May 2006 10:19:27 +0000 http://blog.jungledisk.com/2006/05/05/yourdata/#comment-2 "all of your data is encrypted before it leaves your computer, and stays encrypted while stored" NICE! But how is it "encrypted"? Too simple to crack 128 bit encryption? What method? What level encryption? “all of your data is encrypted before it leaves your computer, and stays encrypted while stored”

NICE! But how is it “encrypted”? Too simple to crack 128 bit encryption? What method? What level encryption?

]]>