mind elaborating?
If I let them handle the TLS for me then I can see that. but if, for example, I'm using NextCloud, which implement end to end encryption from client to server, then I wouldn't care if they did, no?
EmbarrassedDrum
joined 1 week ago
tl;dr: classic convenience/privacy. depends on your threat model. surely better than Google. models of zero trust will help.
That's a great question, that I have asked myself before too. It doesn't have one answer, and any one would make their own choices based on their own respective threat model. I'll answer you with some of my thoughts, and why I do use their services.
I'll take as an example my usage of NextCloud, coming as a replacement to Google Drive for example.
let's break up the setups:
- client (mobile app, desktop client, browser)
- communication to server
- server
It's oversimplified, but to the point: In Google's setup, you have control of 0 out of three things.
- you use their closed source client, 2. they decide the communication to the server (if there's any CDN, where their servers located, TLS version), and 3. data is on their servers, wether encrypted or not is up to them.
In NextCloud's setup,
- The clients are open source (you can varify them, or build your own),
- communication to server is up to you. and in this case you trust your data with CF, that's right. gonna have to trust them.
- server is your server, and you encrypt the files how you want.
From just this look, NC is clearly better off. now, it's not perfect, and each one will do their own convenience vs privacy deal and decide their deal.
If you deploy some sort of e2ee, the severity level of CF drops even more, because they're exposed to less data. specifically for NC they do do e2ee, but each solution to its own. https://nextcloud.com/encryption/ this goes as an example for zero trust model. if you handle the encryption yourself (like using an e2ee service), you don't have to trust the medium your data is going through. like the open internet.
gotta admit I haven't read the ToS, but I didn't encounter any problems. I'm streaming GBs of music via the tunnel and it still works. p2p I didn't try, but I don't really see a reason to?
no problem!
So what if you took my king hostage? Yours gonna have nightmares from seeing my entire horde die before him! ha! you may have won the game, but ah.. ahhg.. you may have won! but I...! you'll see me!!
another option is to use Cloudflare's tunnels. it's free, I use it all the time. really great.
yeah that's very odd...
You can pirate the sheets out of Songsterr. It's probably the most popular site for music sheets. I didn't find a convenient way, but I was able to:
- use Ublock Origin to remove all distracting elements.
- Optional: log in and change to light theme
- screenshot and print.
I didn't find an add on, or a way, that let me save the page as is. they always block it. so only screenshot is what I was able.
You can run your searxng on a VPS, and then it'll hide your IP address.
In most cloud provides you can also change your machine's IP address so there's also that.
that's gonna make it very slow tho...
Oracle have a great free tier. For free (not a trial, but forever free), you can get a virtual machine with 24gb RAM, and storage of 200gb. you might wanna consider that.
If you do choose to use oracle, I'll note you that you do need a credit card, tho it'll not be charged unless you manually upgrade your account to paid account.
I'm not advertising them, I just really think they're great and I'm using it myself.
looks really cool!