Lea Gröber: Understanding self-hosting and security through Nextcloud

The Nextcloud Podcast

So many Nextclouders – from enterprise and education to activists and families – decide to self-host their privacy-focused IT infrastructure. What exactly motivates us to self-host? Is this inherently an increased data security risk? What of the grit needed to host your own digital infrastructure? The answers to these questions may surprise you!

Lea Gröber, PhD student in Usable Security @ CISPA Helmholtz Center for Information Security, shares insight from two recent studies exploring motivations in self-hosting and Nextclouders specifically.

We explore the topic of Usable Security and how, in terms of security, the human aspect of your digital infrastructure may be the most important, and yet the least understood. Afterall, “Users are not the enemy.”

Lea and Brent touch on a wide gamut of related topics throughout, including:

• CISPA’s study featuring 1000 Nextcloud instances in understanding self-hoster motivations
• Technological self-determination as a modern fundamental right
• Self-hosting as a socially embedded activity, and a democratic act
• The many multi-layered trust relationships involved in self-hosting
• Are self-hosters more privacy-aware than the general population? (spoiler: no!)

Episode Links

• Vote for Nextcloud in the CloudComputing-Insider Award 2024 – Nextcloud
• Lea Gröber | CISPA
• Lea Gröber | LinkedIn
• To Cloud or not to Cloud: A Qualitative Study on Self-Hosters’ Motivation, Operation, and Security Mindset | CISPA
• To Cloud or not to Cloud: A Qualitative Study on Self-Hosters’ Motivation, Operation, and Security Mindset | USENIX
• Towards Privacy and Security in Private Clouds: A Representative Survey on the Prevalence of Private Hosting and Administrator Characteristics | USENIX
• USENIX Security ’24 | USENIX
• Usable security – Wikipedia
• Usable Security: A Human-Centric Approach | NIST
• Home Assistant
• MagentaCLOUD + T-Systems: Building a 2.2M User Nextcloud – Nextcloud
• Users Are Not the Enemy – Anne Adams and Matina Angela Sasse

The post Lea Gröber: Understanding self-hosting and security through Nextcloud appeared first on Nextcloud.

Chapters

1. Introduction (00:00:00)

2. Interview with Lea Gröber (00:02:01)

3. Usable security - a definition (00:06:04)

4. Self-hosting - a socially embedded task (00:15:23)

5. Edge case of Interviewee #14 (00:17:24)

6. Why study Nextclouders? (00:21:31)

7. Knowledge bartering through privacy collectives (00:24:48)

8. Security insights revealed (00:26:41)

9. A second, expanded study (00:32:05)

10. To grit, or not to grit? (00:39:01)

11. Cross-cultural factors (00:41:25)

12. Motivational factors in self-hosting (00:45:10)