Timeline for What are the techniques to know if VPS cloud hosting provider is accessing my data?
Current License: CC BY-SA 4.0
5 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jun 5, 2019 at 11:25 | comment | added | TripeHound | @MarsRobertson In CaffeineAddiciton's scenario, there are no keystrokes to capture. You encrypt locally, using a key that remains local then ship the encrypted data to the VPS. Later, you retrieve the encrypted data from the VPS to your local machine and decrypt it there using your key (which has never left your control). At no time is the key seen/seeable by the VPS. This is different to an encrypted drive on the VPS where you would have to send the key (or a password/etc. that access the key) to the VPS. | |
| Jun 4, 2019 at 14:29 | comment | added | Mars Robertson | I see your point. Encrypted storage. In that way, they'll access only the cyphertext... But I'm worried that when accessing the encrypted storage, they can capture my keystrokes. The reason why I'm asking? Don't trust. Verify. Thinking about running Lightning Network on a VPS: github.com/lightningnetwork/lnd/issues/3159 (and realized that a rogue admin can simply access my account) | |
| Jun 4, 2019 at 14:23 | comment | added | CaffeineAddiction | @MarsRobertson im not sure I follow ... my answer had nothing to do with ssh. I simply said if you encrypted data in a trusted location, and stored it in an untrusted VPS (with out the key ever being shared) would be the only way to be 100% sure the VPS provider doesn't have access to your data. | |
| Jun 4, 2019 at 13:13 | comment | added | Mars Robertson | Is it really a feasible workaround? I give you stream of bytes. You give me some hardware (virtualised hardware) at a data centre. I have a SSH key to make sense of that stream of bytes. You can simply capture the bytes and SSH key, be essentially a full owner anyway? | |
| Jun 3, 2019 at 16:01 | history | answered | CaffeineAddiction | CC BY-SA 4.0 |