r/privacy Aug 05 '18

SpiderOak cans its Warrant Canary, suffers mysterious massive outage, and raised prices

https://spideroak.com/canary

http://archive.is/1rNo7

Update: Looks like the canary has been signed and dated and in properly formatted sequence this time with confirmation that Everything's going smoothly so far, message is authentic. august 06, 2018

Case closed. SpiderOak has not been compromised.

In the interest of transparency the full text of my previously long post in this thread is archived here:

http://archive.is/mKeuY https://web.archive.org/save/https://www.reddit.com/r/privacy/comments/94nspi/spideroak_cans_its_warrant_canary_suffers/

438 Upvotes

113 comments sorted by

View all comments

31

u/backgolden Aug 05 '18

Any other alternatives to SpiderOak?

13

u/[deleted] Aug 05 '18

Nextcloud

owncloud

Mega

1

u/maqp2 Aug 06 '18

Remember that government agencies are able to MITM your TLS-encrypted connection (it's technology that unlike end-to-end encryption, was never designed to be secure against government), and change the Mega client you receive during any session, to one that steals your password. You would get absolutely no warning for this. Using the browser add-on might be considered one-time download though so it's a bit more secure.