Remote data storage with deaf encryption
Hello, habrozhiteli.
Before you start - I do not consider any of you a criminal, a man who hides information, child porn and so on. I just want to know what you think about my idea.
In general, this is the case - in our altnet.lv datacenter there was a NAS lying in the amount of ~ 120 Tb. The thought came to me to make storage on this wealth, but not simple, but encrypted - and so that only public keys and encrypted data are stored on our side. That is, even if a mask-show comes to us with a cry “give us all the most secret accounting of such and such a company”, we politely dump the encrypted files to them and say goodbye to 450 years.
')
First, who needs it. According to the list - all CIS countries, where the police can come just like that, take out a couple of racks and say goodbye. Accounting backups, banking systems, financial information - all this can be freely hosted so no one except you can read it. If you have your own SMS gateway, it’s not a problem to make it so that when you receive an SMS from you, the data array is dropped and a couple of times is filled with random data on top.
Secondly, prices. Google Storage costs, I remember, 0.3 per gigabyte. I think the price of 35-40 dollars per gig per month and unlimited traffic will satisfy everyone.
Thirdly, communication with the client. Suppose we do this - you knock on Skype, order / pay for how many gigs you need. We send the password phrase to communicate with the server + console utility under win / lin which can do open / close / get / put / ls / mkdir / rm based on your keys. Everything works - everything is encrypted on your side with your own key, it is sent to us via HTTPS, including the names of the files, and we put everything in daddies. Yes, alas, the folder structure will remain, but this is a minimal security problem.
Third, development. I myself have long needed such a solution, having tried cryptloop / EncFS / PGP / Amanda and other containers, and I know how important the development of such a project is, therefore I guarantee:
Thoughts, wishes and gigabyte reservations - in the comments or in a personal.
I need your opinion, friends.
Before you start - I do not consider any of you a criminal, a man who hides information, child porn and so on. I just want to know what you think about my idea.
In general, this is the case - in our altnet.lv datacenter there was a NAS lying in the amount of ~ 120 Tb. The thought came to me to make storage on this wealth, but not simple, but encrypted - and so that only public keys and encrypted data are stored on our side. That is, even if a mask-show comes to us with a cry “give us all the most secret accounting of such and such a company”, we politely dump the encrypted files to them and say goodbye to 450 years.
')
First, who needs it. According to the list - all CIS countries, where the police can come just like that, take out a couple of racks and say goodbye. Accounting backups, banking systems, financial information - all this can be freely hosted so no one except you can read it. If you have your own SMS gateway, it’s not a problem to make it so that when you receive an SMS from you, the data array is dropped and a couple of times is filled with random data on top.
Secondly, prices. Google Storage costs, I remember, 0.3 per gigabyte. I think the price of 35-40 dollars per gig per month and unlimited traffic will satisfy everyone.
Thirdly, communication with the client. Suppose we do this - you knock on Skype, order / pay for how many gigs you need. We send the password phrase to communicate with the server + console utility under win / lin which can do open / close / get / put / ls / mkdir / rm based on your keys. Everything works - everything is encrypted on your side with your own key, it is sent to us via HTTPS, including the names of the files, and we put everything in daddies. Yes, alas, the folder structure will remain, but this is a minimal security problem.
Third, development. I myself have long needed such a solution, having tried cryptloop / EncFS / PGP / Amanda and other containers, and I know how important the development of such a project is, therefore I guarantee:
- let's sell 5 terabytes - there will be a web interface
- we will sell 15 - there will be a driver for fuse
- let's sell 30 - there will be a GUI client and a file driver for windows
- there will be 50 - we will fasten an e-alladin e-token, where all your keys will be stored, and personally I am winding up in amsterdam where our polstoeechki stand, and there will be our backup
Thoughts, wishes and gigabyte reservations - in the comments or in a personal.
I need your opinion, friends.
Source: https://habr.com/ru/post/97233/
All Articles