How would you protect files of a VPS (Virtual Private Server) from snooping by the service provider?

      • boredsquirrel@slrpnk.net
        link
        fedilink
        arrow-up
        1
        ·
        edit-2
        1 month ago

        Pretty cool!

        Android and ChromeOS both also just use fuse for userspace (and user-files) encryption. This could totally be used too.

        But of course, if something is not on your RAM it is not safe

    • JubilantJaguar@lemmy.world
      link
      fedilink
      arrow-up
      1
      ·
      1 month ago

      Another option: encrypt a sparse file rather than a disk volume. Mount the file to local filesystem and open and close it there.

      • Zikeji@programming.dev
        link
        fedilink
        English
        arrow-up
        5
        ·
        1 month ago

        LUKS, or anything that relies on the server encrypting, is highly vulnerable (see [email protected]’s response).

        Your best bet would be encrypting client side before it arrives on the server using a solution like rclone, restic, borg, etc.

      • lud@lemm.ee
        link
        fedilink
        arrow-up
        1
        ·
        1 month ago

        Yeah, at least the ones I used have some kind of console/terminal you can use and often you can access BIOS and reinstall the OS if you want.