IMPORTANT UPDATES
I just found out that Windows Live Mesh does NOT encrypt user files stored on their server, here is the original blog post talking about how the original Live Mesh was designed and implemented three years ago: http://blogs.msdn.com/b/livemesh/archive/2008/05/29/behind-live-mesh-authorization-and-encryption.aspx, and to my disappointment, three years later, Windows Live Mesh still has not implemented data encryption to protect user files. Here is the question I asked and the answer I got from Widnows Live Help Center: http://windowslivehelp.com/thread.aspx?threadid=6c278f92-9ab2-4917-88eb-9dc03ef74947
SugarSycn will encrypt user files and no one else can decrypt your files except yourself, according to their reply to my email inquiry:
[UPDATE, June 16th, 2011]: SugarSync apologized to me that the email above from their support staff has incorrect information regarding the encryption. The encryption key is NOT stored in user’s password, and SugarSync IS able to decrypt user’s file. Here are some quoted messages from SugarSync:
We store each user file with a different key. The keys are not based on user passwords in any form; we couldn’t provide the functionality we do (sharing, photo galleries, etc.) otherwise. Encryption keys are different for each user.
I understand the concern that some customers have about the possibility of SugarSync employees accessing data stored on our servers. This happens in very rare cases during troubleshooting with the permission of the customer; only a select few people have that level of access.
With respect to warrants and subpoenas, we abide by the laws of the State of California and the United States.
Let me know if you have any further questions.
Thank you!
==================
Hello Jeffrey-
Our agent did indeed give you incorrect information, and I apologize for that. Encryption keys are not stored with your password.
From your ticket, it looks like you wanted to know if SugarSync can decrypt files if needed. The answer is yes, we can decrypt files. This occurs only when we’re troubleshooting issues with the customer’s consent.
I’m sorry again for the miscommunication. Let me know if you have any further questions.
Thank you!
=================
So I apologize to those who read my post and had a wrong understanding of SugarSync’s security.
==================End of Update==========================
Since the security issue of Dropbox was discovered and the contradiction of their security claims in their new terms of service and on their web site was criticized, I have decided to drop Dropbox and to find an alternative.
Here are some on-line synchronization and backup services I have used or am still using. I personally trust their security policy, so I will not discuss anything related security.
Windows Live Mesh
Before Dropbox, I have been using Microsoft’s Windows Live Mesh since its beta version and I am still using it.
Pros:
- Service is stable and the synchronization speed is very fast.
- Generous free space for on-line synchronization. It integrates with Windows Live SkyDrive (25 GB free space if you have a Live ID) in which 5 GB of your SkyDrive space can be used for on-line synchronization.
- PC-to-PC synchronization. Windows Live Mesh lets you synchronize a folder on one PC running Windows Live Mesh client directly with another PC running Live Mesh client without using the on-line storage. Because of this, there is no size limit on the data you synchronize as long as your hard drive is big enough to hold the data.
- Remote desktop access. It is a killer feature. Among all the PC’s running Windows Live Mesh client, you can log into a PC from another PC remotely, just like the Remote Desktop Connection feature in Windows, but uses different protocol. It is very handy if your computers are behind firewall, RDC port is blocked, or you don’t know how to set up port forwarding, etc, all you need to do is to allow the computer to be accessed remotely. Then when you launch Windows Live Mesh client from a PC to connect another PC, you will see a screen like this under the “Remote” tab:
After the connection is setup and you type in your credentials, you can remotely access your PC (the scree shows I remotely logged into my home PC from my office PC via Windows Live Mesh):
- Automatic synchronization of program settings. If you turn on Program Settings synchronization feature in Windows Live Mesh, then you can have your IE favorites synchronized between computers, and also have your Microsoft Office styles, templates, email signatures, and custom dictionary synchronized as well.
- Allow multiple Live Mesh synchronization on one PC.You do NOT need to install multiple Windows Live Mesh clients on one PC if you are sharing the PC with other people, and it does NOT require each user to have a separate desktop account. You can sign in with different Live ID to set up different sync folders (Dropbox does not allow this).
Cons:
- Windows Live Mesh only supports Windows and Mac. No Linux support is available at this moment though it has been requested.
- Windows Live Mesh web interface is very poor at the time of writing. The current web interface allows you to view and download your files stored in the 5 GB SkyDrive synced storage, but you cannot add new files to the storage folder. The old beta version of Live Mesh allows user to upload files to the on-line synchronized folder, but the current version somehow removed this feature, and it drives me crazy.
- Although you can remotely log into a computer running Live Mesh client via the web interface, it requires you to install an ActiveX control, which means you must use Internet Explorer.
- No versioning support.
Conclusion:
I will continue using Windows Live Mesh and hope the future release of the web interface will be better and allow user to add files to the SkyDrive synced storage through the web UI. The lacking of Linux support does not bother me very much as long as I can upload/add file to the SkyDrive synced storage.
SpiderOak
SipderOak is a online backup and synchronization service. It does everything Dropbox does plus online backup feature. It has various plans, including 2 GB free space plan and other paid plans if more space is needed. You can also earn more free space by referring friends to use SpiderOak.
Pros:
- Multi-platform support. SpiderOak supports Windows, Mac, Linux and mobile OS.
- Online file backup and accidental file deletion protection.
- Zero-knowledge privacy environment. SpiderOak does not store user’s password, so it is the user’s responsibility to remember password. Your data is encrypted on SpiderOak’s server and only accessible by you because only you know your password.
Cons:
- Long learning curve. The SpiderOak client UI is not straight forward and it took me quite some time to learn how to use SpiderOak. For example, you will have to set up a backup folder (or more) before you can set up sync folders. To set up synchronization between computers, you will have to give a name for each synchronization. To share files, you will have to create a ShareID and RoomKey, then you can send either of them to the person you would like to share with. To me, this is too complicated.
SpiderOak Sync UI:
SpiderOak Share UI:
- Unstable service. I tried to sync files between a Windows PC and an Ubuntu PC, and sometimes after I deleted a file from the Ubuntu PC, the file would not be deleted from the Windows PC, though the client showed all files are synced. It also happened to me a couple times that when I added a file to sync, the file was mysteriously deleted after the synchronization.
- Slow upload and sync speed. I noticed that the upload speed for online backup and the sync speed are slow, even with my gigabit connection.
- You cannot reset your password if you forget it. If you want to change your password, you will have to change it in the SpiderOak client. However, if you forget your password, all you will get is a “Password Hint” if you set up one when you sign up. If you don’t’, then you are dead. You may get some help by contacting their support team, but I have never tried to contact them, so I don’t know if they can help you reset your password.
- Smaller free
Conclusion:
I would not recommend SpiderOak at this moment because of the unstable service. I may give it another try in the future when the service is more stable.
Memopal
Memopal is online backup and storage software. It allows you to access your file, or share your files, but it does not support file synchronization. I tried for some time and uninstalled because it does not have file synchronization feature. Besides, it leaves a shortcut in the device list in Windows 7, very annoying. You will have to search your registry for “Memopal” to remove it. Just for that, I will not recommend Memopal. Here is a screen shot of the issue I am talking about after the uninstallation.
SugarSync
SugarSync provides the similar services as SpiderOak does: online backup, synchronization, and sharing. It provides various service plans, including a 5 GB free plan and other paid plans if more space is needed. You can also earn more free space by referring friends to use SugerSync.
Pros:
- Service is stable and speed is fast (sync speed is a little bit slower than Windows Live Mesh).
- Generous free space for online backup and synchronization. SugarSync gives you 5 GB free space as Windows Live Mesh does.
- Easy to use SugarSync client user interface.
- Upload and sync via email.
- Support mobile device.
- User friendly web interface. You can access your file, share your file, or sync your file via the web interface you don’t have the client installed.
- Versioning with the ability to restore. SugarSync stores up to 5 versions of a file plus the current version, so if a file is accidently deleted during the collaboration, you can restore the file to the right version.
Cons:
- Only support Windows and Mac platform. There is no Linux support at this moment, thought Linux support is on the to-do list.
- Cannot sync Outlook .pst, Quicken, and Quickbooks. System folders cannot be synced either.
Conclusion:
I like SugarSync and recommend it to everyone who is looking for an online backup and sync application. If you use this link to sign up for a 5 GB free plan, you will get a 500 MB bonus (of course, I will get a 500 MB bonus) before 5/31/2011, after 5/31/2011, the bonus will become 250MB. https://www.sugarsync.com/referral?rf=e3izqm2hfvy70
After you sign up, do remember to log into your SugarSync account and click “Getting Started” tab, then make sure you finish all the five tasks listed there and you will earn an additioanl 250 MB bonus.
To sum up, my recommendation is:
1. SugarSync
2. Windows Live Mesh (if in the future Windows Live Mesh has a better web UI and implement data encryption, I may give Widnows Live Mesh higher rank than SugarSync because of the remote desktop connection feature.)