Western Digital and OwnCloud Team Up to Bring OwnCloud to Home Users
I don&#x27;t really get why one wants to trust ownCloud with private files:<p>- &quot;logging changes&quot;: <a href="https:&#x2F;&#x2F;github.com&#x2F;owncloud&#x2F;core&#x2F;commit&#x2F;eea96298951805dfc6eb9f58ccb172b5a718e7e2" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;owncloud&#x2F;core&#x2F;commit&#x2F;eea96298951805dfc6eb...</a> vs <a href="https:&#x2F;&#x2F;owncloud.org&#x2F;security&#x2F;advisory&#x2F;?id=oc-sa-2014-020" rel="nofollow">https:&#x2F;&#x2F;owncloud.org&#x2F;security&#x2F;advisory&#x2F;?id=oc-sa-2014-020</a><p>- ownCloud is a PHP application with quite a few third-party modules of varying quality. Looking at the security history of Wordpress, it&#x27;s not hard to imagine what&#x27;s going to happen.<p>- The maximum bug bounty for ownCloud is 500 USD. I think my data easily exceeds that.<p>- From what I&#x27;ve heard, security fixes are provided to enterprise customers first, so if you&#x27;re lucky your adversary is one of them and knows about vulnerabilities way ahead of you.<p>To their credit, ownCloud openly publishes security advisories for every vulnerability, but I still think it&#x27;s architecturally designed to fail.
Exposing this to the internet is probably a bad idea. If you just need storage, you probably should just use dumb storage. If you need project management stuff and care about privacy, maybe look at <a href="https:&#x2F;&#x2F;protonet.info&#x2F;" rel="nofollow">https:&#x2F;&#x2F;protonet.info&#x2F;</a> or something along those lines. Also <a href="https:&#x2F;&#x2F;www.boxcryptor.com" rel="nofollow">https:&#x2F;&#x2F;www.boxcryptor.com</a> is really nice - the Dropbox desktop client does proper cert pinning (ownCloud doesn&#x27;t) at least.<p>Other than that, storage connected to a raspi via USB will probably yield rather bad transfer speeds?