Hacker News Reader

Comment by redm | Hacker News Reader

"If they would do something I don't like, I would just never upgrade anymore and be done with it." -- That sounds like a good strategy but in my experience, it never works because your technology environment is not a vacuum (I assume). At some point you'll need an upgrade for security, compatibility, etc.

View on HN

It can run in a container, a virtual machine, hosted on a cloud instance or whatever. Nowadays, you have infinite choices for isolation. One of my colleague runs it in a DigitalOcean droplet and nothing else.

If you want to run your file sync client in a container, I think that limitation alone removes a huge amount of value from a low-friction file sync tool.

Why would you run the client in a container? I was talking about the server.

Because the client can be just as vulnerable to security issues as the server is.

Isolating for security is a totally different topic. We talked about pinning the application to a specific version, and I suggested that it can be done with various tools, isolating from a bigger operating system where packages would automatically updated and Nextcloud would break after a while. It has nothing to do with security.

Of course you can do security for isolation on top of it any time, and sure, you won't get security updates after a while which would be nice, but there are tools to secure an outdated app in other ways either.

> but there are tools to secure an outdated app in other ways either.

Not really.

A quiet media server at home and VPN is what does it for me. That solution is not for everyone but someone could start making pre-built images or media servers with nextcloud. I believe FreeNAS and the like already have nextcloud as an app option.

Reply on news.ycombinator.com