DIY Dropbox Alternatives
jfruhlinger writes "Dropbox was a service that many techies fell in love with, only to be disappointed when they found out about its dodgy security and dubious copyright claims. The company's tried to make amends — but what other options are there for those who have had enough? While there's nothing quite as seamless out there, it's not difficult to build your own Dropbox alternatives from freely available software and services from other vendors."
really "building your own" solution?
I appreciate that one could argue that using software you haven't written yourself shouldn't count, but putting something together with a Linux box running Apache, WebDAV and various other things seems more "building your own" than simply using an existing third party alternative, as the article recommends.
I use DriveShare from a company called Webmaster. Your files are kept on your machine, it has windows and Linux versions, an iPhone client (for whatever that's worth). It has some fancy dyndns setup built-in which is nice so i dont need to worry about cox changing my IP every few days and it works behind NAT. Overall I'm pretty happy with it. YMMV.
The site is at http://www.webmaster.com/
DIY stand for Do-It-Yourself...installing other third-party-applications which are doing the same does not count as DIY!
DropBox includes sharing functionality (you can choose that some of the files are accessible by anyone through browser) and DropBox doesn't want you to sue them for that so they need you to give them a permission to share your files. It's as simple as that and is the same reason why Google+ asks similar rights to all the content you upload. As for the dodgy security... When a program is configured to login automatically, it stores the login credentials somewhere that a hostile person with access to your files can probably copy. I doubt you get around this with DIY version...
Even ignoring those (=assuming that dropbox isn't to be trusted with your data and that their security sucks)...What problem do you want to solve that you can't solve with DropBox + encryption?
Why not use Spideroak instead of dropbox. Spideroak have a zero-knowledge privacy policy. I'd say it's not quite as polished a product as dropbox, but everything is encrypted before it leaves my computer (come on spideroak open source your client so we can check!) and stored encrypted, so NO ONE can read it. I have access to files from android to. (I am not affiliated with Spideroak in away way.) Join via this link and we both get an extra 1GB (I believe you start with 2GB free): https://spideroak.com/signup/referral/dd998cb68d2fba5eb916a000411c2263/
First simple solution: host your own secure ftp.
Second simple solution: call Dropbox and tell them you'll pay to use their service if they sign your contract. Write your contract and mail it to them.
Complex solution: build your own software to do what they do. I don't see how that's going to be cheaper or easier than the first 2 simple solutions.
You can't handle the truth.
if you have a linux shell with enough space for your files, you could use unison. its rsync-like, and can operate between two machines, or with a server (master) and multiple clients. unison is available for windows, mac and linux, but its probably simpler if the machine that's always on is running linux.
#1, "building your own" misses the entire point of using a cloud service. The whole idea is that I don't have to build my own infrastructure - I just sign up and use theirs.
#2, changing to another provider or buying a piece of sync software is not building your own.
Although offtopic, because not DIY, the answer, for now, for me, is "Wuala". http://www.wuala.com/ High quality java software, all content fully encrypted, sophisticated neatly designed access rights management (cryptree). It's not open source, but otherwise really close to perfect. I am in no way associated with the company (originally "Caleido", now merged into "Lacie").
When I had security concerns about dropbox in the past, I was very pleased to find iFolder (http://www.ifolder.com). It runs on mono and authenticates with our company LDAP; it also has clients for linux/macosx/windows.
Give it a try, it's a bitch to install but when it's set up it just works
rsync + ssh + cron + unlimited web hosting (that allows ssh access)
or
rsync + ssh + cron + a tunnel between the computers you want to sync
You might also want a manual update script to update between cron syncs.... or better yet.... write your manual update script and have cron call it for easy maintenance.
Make America grate again!
I would agree. This is a "I HATE CLOUD SOLUTIONS BECAUSE THEY ARE CLOUD SOLUTIONS" type of response. You can't judge Cloud solutions as one evil entitiy but as each one individually. There are good ones, there are bad ones, they are ones where you can work with a predefined contract of rules to follow, and they are ones you just agree to their rules. Cloud is the same as SaaS with is the same as Hosted Software, which is quite similar to Time Sharing. The Cloud name caught on, SaaS didn't, and Hosted Software just sounded too old.
I was hoping for some cool non-centralized server alternative coded with at least some neat scripts... No that article was lame.
If something is so important that you feel the need to post it on the internet... It probably isn't that important.
Good job bro!
http://yro.slashdot.org/story/11/06/16/1618206/Open-Source-Alternative-To-Dropbox
goodsync.com
thats where its at hombre.
Their software is only whats responsible for SYNCING your files. You get to specify your own sotrage solutions. Amazons3, webdav, sftp etc...
So encrypt your stuff and push it to s3. I think that's what the article's talking about anyway.
If you mod me down the terrorists will have won
We evaluated WebDAV on a hosted system and various open-source solutions (like hosted Alfresco) as alternatives to a company-wide Dropbox license. The fact is that if you want to have anything more sophisticated than a simple fileserver (e.g. different folder permissions, multiple file versions, somewhat sane conflict resolution), there is no good free alternative at this point if you have remote people --if you've heard of one, I'd love a pointer.
For a local LAN, I'd stick with Alfresco on a decent box, but Alfresco falls apart on remote connections, and plain WebDAV is too slow / buggy.
In the end we went with Egnyte. It's not without its faults (buggy iOS client for one, and the Windows clients need some optimization), but it does more than Dropbox/Box.net/Sugarsync/Syncplicity, works great for SOHOs and it's actually cheaper than a VPS that can handle Alfresco and the like.
... but use something like EncFS to keep all your files encrypted. You still get the advantages of on the fly synchronization over your various computers, but Dropbox loses the ability to do de-duplication to keep their storage costs down. That's what happens when you start playing silly legal games, users work around them and usually to your detriment.
I've never used DropBox but when family was wanting me to join so they could share some family movies (Canada and Australia) I set up AjaXplorer
It may not be the same but everyone liked it, used it and found it easy to use.
.
The basic "cloning a commercial service is easy" tone of this article used to be ok up to a point - realtime push notifications. All clients need to know when items were dropped, not just what. For Android, up until version 2.2 this was a pain - you had to implement long poll http battery-draining lookup schemes. Not so nowadays - 2.2+ gives developers C2DM - cloud to device messaging - which should put the nail amongst the pigeons, to deliberately mix my metaphors. Now any app/server can basically push to any handset (that's running your listening software, natch), so it's hello to IM'ing every app etc, and a genuine worry for those previously in this exclusive space.
Disclaimer - I wrote the drop.io Android client before Facebook bought them out and I never heard from them again.
It's really depressing that dropbox didn't even come up the the standard of ordinary FTP from about twenty years ago.
If you want something that behaves a bit more like dropbox for the UI but is orders of magnitude more secure you could probably do it with rsync, ssh, zenity for the UI and half a dozen lines of bash script - probably in under a day even if you have to google for what all those terms I used are. That's how appallingly bad dropbox is - with all that is freely available today they couldn't even put something together that was as good as FTP twenty years ago. That's truly an epic fail.
Every two years or so, I critically evaluate my options for this problem--even going through the trouble of posting an AskSlashdot on the topic--and every time, I always come back to unison. There are many DIY, non-cloud managed solutions out there; see this article for a useful comparison matrix. I've even tried using git for automated versioning and syncing. However, none seem to work as cleanly as a unison setup combined with a DynDNS IP forward to my home box. Include snapshot backups using StoreBackup--the best backup tool, IMHO--and you have a setup that is tough to beat.
Home server + git + gitweb + webserver + httpauth + cron
if you need all file: git pull / clone
if you need a specified file: open gitweb
I have an account on Dreamhost. In my case I use SVN as my 'poors guy dropbox.' Works on Windows (turtoise), android, Linux and Mac....
I use tarsnap.com for backup because
1) the source code is public
2) encryption and compression takes place on your machine before being sent over
3) it offers incremental backup
4) it is extremely cheap...
For collaboration I use bazaar... Anything else?
Seriously... such a dumb article in the front page of Slashdot?
That's a job for plug computers : buy one, plug it to AC, plug it to ethernet, ssh to it, change root password, create users. Voila, you have a sFTP server ! You could even automatize the last step so that the user would never see the much dreaded command line that really gives too much power to users in this area of dumbed down GUIs.
The Wise adapts himself to the world. The Fool adapts the world to himself. Therefore, all progress depends on the Fool.
FTP
There's still Wuala.
... you must first ... invent the universe
You most certainly can judge Cloud solutions as one evil entity. Data is not in your hands. Even if you find a good vendor, he might get hacked, he might sell to some evil counterpart, etc...
What is in your home is under your responsibility. For the rest, you have to trust someone.
Write boring code, not shiny code!
Are there any personal (non-business specific) online storage services that use certificate authentication instead of username / password ? It would be nice if the certificate was also used to encrypt the data on the client side. I have so far only found one service (http://www.lock-box.com/processes-and-keys/) and it appears to be aimed specifically at businesses. It does not have to be a free service, just aimed at end-users (multiple) and reasonably priced.
We've had good success with ifolder running our file sharing system. It can be a bit of a bear to get up and running (especially on debian based systems), but once it's up and running it's very easy to use and admin. It's particularly nice because of the distributed nature, everyone gets their own copy of the file, so even if you can get access to the server, you can work on your files, push them when you get a chance, pull new ones down, whatever. Finally, it's designed for you to host your own server, and setting up that server is trivial.
The downside is that it's a novell castaway, and support is not particularly good. I'm hoping the community will rally and improve support as it's finally become open-source, but until then....
What is in your home is under your responsibility. For the rest, you have to trust someone.
I disagree with your premise. Presuming you have network connectivity, you are "trusting" all the vendors that stand between your data and the internet. Windows, Linux, MacOS, even ssh, all have a history of exploits. You are trusting Microsoft or Apple or some open source developer. You are also trusting the vendor who makes your router or modem. You are also trusting your locksmith or lockmaker and security system installer.
I understand the concern with control over your data in the cloud - but nothing stops you from limiting or encrypting the data you send into it.
W..w..W - Willy Waterloo washes Warren Wiggins who is washing Waldo Woo.
Ampache (not a misspelling) is great. Check it out, Linux action show did a feature on it.
As long as you don't have any filenames that aren't in the English character set, I've found UNISON works perfectly no matter where in the world you travel so long as you can SSH into your box..
apt-get install unison-gtk
The password prompt even allows you to use One-Time-Passwords (Yubikeys) with Unison after you set up your PAM for OTP..
http://www.cis.upenn.edu/~bcpierce/unison/
I was going to suggest iFolder, but this post's already here. I like it because I set it up, handed it off to a non-IT person to run, and only hear a complaint when someone shuts down the server.
It's basically a dropbox workalike from user perspective, as far as I can tell. With cross-platform client support to boot.
Well, except one bug involving a user with admin privileges somehow removing all owners for a particular folder. You can still use it, but can't access it with the admin interface. There's a data repair I've never managed to apply...
But yeah, overall, very happy with it. The main Debian pain is to do with Debian's mono-apache integration setup getting in the way, if I recall correctly. I ended up turning that off. ^_^
Paul "TBBle" Hampson
Paul.Hampson@Pobox.Com
With all the recent trouble dropbox had our company IT chief didn't allow use it anymore so we had find something else. We were looking for DIY solutions as well until we found dataondemand. Our company has been using it for a while now and it feels pretty much like a dropbox replacement except the higher ups are happy now as we are allowed to run the servers on the company network instead of some untrusted 3rd party.
Demo versions are available on their website I believe http://dataondemand.se
http://www.syncany.org/ is an open source program which can sync data to a variety of cloud backend's but encrypts it first. However its not hit its first release yet.
They appear to have better security than Dropbox, but how can I be sure?
First of all, this "cloud" idiocy is nothing more than marketing speak to fool idiots into believing that a corporation providing web-services through their is something new and, more astonishingly, something desireable.
Regarding your claim, it is nonsense. The whole idea of using a web-service is to access some service through a network. A web service is always a web service, no matter who owns the hardware or who pays to run things. Therefore, it is obvious that "the whole idea" of using a web service is not to mindlessly use some third-party service without questioning the consequences or costs. Instead, the whole idea of using a web service is to benefit from a service provided through a network. Nothing more, nothing less.
Therefore, if someone happens to have an old computer taking up space somewhere and if that person happens to need to host files on a server which is connected to a network then, instead of relying on a third-party to provide that service, that person can very well set up their own personal server and provide the service that he needs. And the best part is that by doing it that person is no longer bound to a mutable contract which no one really knows what it states but guarantees privacy breeches and can, in practice, benefit from a limit-less service. If you don't see the point in this then you are clueless to the implications of the choice you are advocating.
Although changing to another provider is not "building your own", installing a server on your own hardware so that you yourself are able to provide your own unlimited, customized service does in fact mean that you are building your own service. And if you don't believe it is then try to mention it in any conversation, and see how you would refer to it as "my own service" instead of "dropbox's service".
Slashdot, fix your code or at least hire someone who is competent at it to do it for you.
Google BarracudaDrive.
Not free, but does what you want i.e. the permission stuff.
You blame WebDAV for Microsoft's bad WebDAV client implementation.
It is for that reason you have many alternatives for Windows.
WebDAV works great on most devices, including iPhone and Android.
It's unfortunately not working on my Windows 7 phone.
What I want from a dropbox alternative, is it's most basic of functionalities: transparent multi-client sync.
I want it to both up- AND downsync the files, from multiple clients at once, without anyone having to click things; and based on filesystem triggers, not some lousy cronjob.
Could be done with iNotify + csync2, I guess; although you also need a mechanism for the server to notify the clients that a file has changed. And then you need to build a client for Macs (they have iNotify or something similar too, being BSD), then Windows (no clue what they have) and then various iThings, Android, Symbian and random stuff.
Easy, eh ?
What a depressingly stupid machine.
We offer an alternative solution (www.myvdrive.net) which runs on all Linux distros, Mac, and Windows. We are currently in a beta phase and getting ready to release. Right now our beta does not offer sharing, but the official release will have sharing and change logs. We do not offer synchronization so we do not run into the issues that most other providers run into using a sync protocol. We have a single copy of the file that is always on the server. So you must be connected to the internet to access a file. We also use native device drivers so our access is very fast and real time.
Anyone using *nix of any kind should be used to being able to put files on any of their machines at any time, nfs, rsync, cifs, sftp, scp. At least that is what I've always thought. Maybe it is an age thing. Anyway. When I'm stuck having to use a windows machine one of the first things I do is downloaded winSCP so I can get to stuff.
Having to work for a living is the root of all evil.
it hasn't been released yet, but goes in to beta soon. it is different than dropbox in that it is much less file sharing/collaboration oriented, but it does a lot of what some people have asked for- complete transparent sync across all device types. you can sign up at http://getyounity.com/
I recently started a job with Syncplicity, a company that makes a similar product targeted towards enterprise use. Needless to say, it feels like DIY to me because a lot of the improvements that I put into the product are based on what I observe in my own personal use.
I wouldn't advise taking the DIY approach for a Dropbox replacement, unless it's a career decision. Magic folder synchronization requires a lot of expertise in many different areas of programming, system administration, database administration, security, and low-level API implementation. It's not something that can be whipped up in a weekend.
No, I will not work for your startup
How about sparkleshare?Uses git...
There are enough alternatives out there you just need space to host.
Best way is using Dropbox + Enc
PogoPlug provides a software only solution that runs on your PC or they will sell you a >$100 box that draws a few watts to host your files if you don't want to leave your PC on. I have a PogoPlug hardware box and love it. Works on my iPad and iPhone too.
Of course Netgear NAS units (and other solutions from equally good companies) can also serve this function if you have a fixed IP address, but PogoPlug routes the traffic through cloud servers so it runs on any home network with dynamic IP support.
Let Dropbox do what it's really quite good at: ubiquitous access on a number of platforms. Meanwhile, don't trust them for shit, because they haev no real incentive to provide more than superficial "trust me" security. Instead, create a TrueCrypt partition on your Dropbox drive so that the only thing Dropbox is hosting is one giant file which no one at Dropbox (or any other service) can decrypt. Because both mount as hard drives, using them together is surprisingly low hassle: it reads to the user like any other partition. There are, I'm sure, ways to attack this (fellow /.ers, enlighten me!), but the basic framework seems pretty solid - Dropbox can get broken wide open, and you don't care at all.
Quit asking what cloud provider can be trusted, and look for solutions which do not require trust in institutions you do not own.
I started using Nomadesk in March and now I cannot live without it. Recently my HD started having problems and I had to send in my computer to get fixed and get the HD replaced. Backedup everything on Nomadesk and all is well now!
90% of the suggestions to "replace" Dropbox expose ignorance about why Dropbox is so popular.
- Automatic, almost immediate synchronization of shared files across multiple devices of varying types (which in the process are backed up to "the cloud")
- Automatic versioning of shared files
- Easy sharing of files on the public internet (via a clickable link to a publicly-accessible url)
- Fast synchronization and file upload/download (sometimes, due to de-duplication, where if it finds the signature already in their system, it doesn't need to store or transfer another copy of the file at all)
- Dead easy for users and IT (only need to install their app, then use is essentially transparent and automatic)
- Cheap (most smaller organizations may be fine with plans ranging form free to $20/month) - as opposed to how many hours of developer time setting up a custom solution? Especially across many users/devices/device types?
On the other hand, some of the security/privacy/etc. concerns are real:
- Dropbox (the company) has access to your encryption keys used to secure content on the server. Thus there are various potential scenarios for your information being accessed by others or made public in some way
- GLOBAL de-duplication across the entire system means your files might be identified as identical to someone else's files. At the least others could infer that an uploaded file had previously been uploaded to the system by another user (potentially leading to a court order to produce the information of all users that had uploaded a file matching that signature). Another remote possibility is two different files that generate the same signature. One user's file would be lost (ie, never uploaded to the server), while the other user(s) would be granted access to a file not belonging to them.
- various TOS concerns, etc.
So people want a system as easy and transparent to use, and as useful and functional as Dropbox, but where they can keep their own server encryption keys to themselves, not mix their data up with others through global de-duplication (even potentially), perhaps host on their own servers for full access control, etc.
(Another feature that might be useful, which I haven't seen in Dropbox or any of the usual alternatives, would be automatic LOCAL file encryption on each device, to help provide security in case a laptop is stolen, for instance.)
Of course if all you need is SOME of Dropbox's functionality, particularly if your users are all technical, then there are plenty of other solutions already (such as existing version control systems).
100 gb online storage for 5 eur per month ... access via ftp/samba/sftp/rsync/scp/http
you can mount it with an encfs to encrypt your files or use a encrypting backup tool (i use duplicity) for security.
there is just no free version, but it starts with 2 eur per month for 20 GB
Don't forget you're also trusting your ISP as well as the backbone service provider who carries your data across the internet.
All the world's a CPU, and all the men and women merely AI agents
DFS namespaces and DFS replication would solve this problem. It's what I use. It does have the disadvantage that you need Windows servers to make it work, but it's totally transparent and awesome once you get it going. I have a Windows server at home and another colo'ed (these are actually just VMs running on ESXi). I use a DFS namespace and have a target folder on each server. So, I can work on either set of files, and Windows keeps them in sync transparently, so for instance if I work on the files at the colo, then go home, I have a local copy of the files so access to them is nice and fast.
I use ownCloud...it does the job.
with offsite storage, you are 100% sure your data is in someone else's hands. data on your hd is only statistically at risk . getting people used to the idea of offsite storage is really bad because most people choose convenience over safety, and safety over freedom.
you are 100% sure your data is in someone else's hands.
While this is true, it is also a necessity. You need to have off-site storage for backups. Whether it's an external drive sitting in your girlfriend's closet or a big binary blob on Dropbox's systems doesn't really matter - you should still be encrypting anything sensitive.
W..w..W - Willy Waterloo washes Warren Wiggins who is washing Waldo Woo.
That is false, i use nephthys in my company and have no problem with any windows (xp, vista and 7), just map a network drive using the webdav url (using http(s):// url, not webdav:// ) and works fine...
macosx and linux (kde dolphin at least) too works fine, but they use the webdav:// format url
i later moved to https and to work i only had to get a valid certificate (get one free in startssl.com)
nephthys dont use authentication, so maybe if there is a problem, it lies in the auth part of windows
Higuita
The entire point of cloud solutions isn't outsourcing. That's SaaS/PaaS/IaaS. Those are not necessarily one in the same. Ever heard of private clouds? The concept of clouds is one of abstraction and universal accessibility.
I agree; I should have said SAAS or IAAS.
s/a cloud service/software as a service/