Sadly, the folks at Nextcloud don’t understand that owning your data and owning your infrastructure are not the same thing. I love the software and have done for a long time. But they consistently contend (needlessly) that you don’t own your data unless you own the hardware storing it. That’s patently absurd and silly. https://mastodon.xyz/@nextcloud/101329538688124205
@paco I would say that they're right, in regards to the hardware that's running NextCloud. Encrypted blobs of data should be able to go anywhere, even a NAS in your friend's basement.
But if an attacker can run his code on your NextCloud instance, it's not your instance anymore.
@paco Looking at their toot, owning one's data is being mentioned in the context of advertising and data mining.
The security of the webapp doesn't enter into it if someone else is responsible for the machine it runs on.
EC2 or at home, if you deployed it, you know it's not getting mined or sold.
@paco Decentralized on anywhere you can get a VPS is still way better than centralized on Dropbox or Google Drive.
A Mastodon instance for info/cyber security-minded people.