Hacker News Reader

If you are going to trust BoxCryptor you can as well trust BTSync directly.

You could argue that trusting two different entities for encryption and storage is safer than trusting a single entity for both. Two unrelated parties are "unlikely to collude" against you.

Of course I'd rather not have to trust either, especially with encryption. Is there an open source equivalent to BoxCryptor?

BoxCryptor interacts just fine with EncFS on Linux (I don't know if its a reimplementation or just a nice Mac OS X gui wrapper round the EncFS code), and EncFS is GPL.

Note that EncFS "leaks" quite a bit of metadata - you might have problems explaining yourself if you've got files called blockbuster-movie.mpg or kiddie-porn.jpg - in certain configurations those filenames will be exposed (I think BoxCryptor always exposes filenames/directory-structure in the free version).

Reply on news.ycombinator.com