HackerReposA FIELD GUIDE TO OPEN SOURCE
ProSponsor the shelf♧ 0
← Back to top all-time
owncloud
core
PHP2013–2021
owncloud / core

core

:cloud: ownCloud web server core (Files, DAV, etc.)

Web DevelopmentSystems & InfrastructureSelf-hostedDevOps & CloudNetworking
Explore on GitHubRead Hacker News discussions
11Distinct people
17Mentions
0Explicit recommenders
8.9KGitHub stars
REPOSITORY AT A GLANCE

What to know before exploring

What it is

:cloud: ownCloud web server core (Files, DAV, etc.)

GitHub

Where it is used

No documented product use was verified in the last source check.

What people are saying

No recommendation phrase was found in the indexed comments.

No classified warning is attached to this page. Read the discussions before treating silence as approval.

Also in these discussions

No other repository is repeatedly linked in the same discussions.

This week on Hacker News

Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 12:54:37 PM UTC.

No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.

Mentions over time

HN mentions by year17 dated mentions

Observed mentions: 2013-03-27 09:42:58 UTC to 2021-01-22 11:13:27 UTC.

012342013-01-01 00:00:00 UTC to 2014-01-01 00:00:00 UTC (exclusive): 3 mentions; 0 submissions, 3 comments20132014-01-01 00:00:00 UTC to 2015-01-01 00:00:00 UTC (exclusive): 4 mentions; 1 submissions, 3 comments2015-01-01 00:00:00 UTC to 2016-01-01 00:00:00 UTC (exclusive): 4 mentions; 0 submissions, 4 comments2016-01-01 00:00:00 UTC to 2017-01-01 00:00:00 UTC (exclusive): 4 mentions; 2 submissions, 2 comments2017-01-01 00:00:00 UTC to 2018-01-01 00:00:00 UTC (exclusive): 0 mentions; 0 submissions, 0 comments20172018-01-01 00:00:00 UTC to 2019-01-01 00:00:00 UTC (exclusive): 0 mentions; 0 submissions, 0 comments2019-01-01 00:00:00 UTC to 2020-01-01 00:00:00 UTC (exclusive): 0 mentions; 0 submissions, 0 comments2020-01-01 00:00:00 UTC to 2021-01-01 00:00:00 UTC (exclusive): 0 mentions; 0 submissions, 0 comments2021-01-01 00:00:00 UTC to 2022-01-01 00:00:00 UTC (exclusive): 2 mentions; 0 submissions, 2 comments2021

Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.

View mention counts and date ranges
UTC ranges include their start and exclude their end. Select a period to filter the source evidence.
PeriodStart (UTC)End (exclusive, UTC)MentionsSubmissionsComments
20132013-01-01 00:00:00 UTC2014-01-01 00:00:00 UTC303
20142014-01-01 00:00:00 UTC2015-01-01 00:00:00 UTC413
20152015-01-01 00:00:00 UTC2016-01-01 00:00:00 UTC404
20162016-01-01 00:00:00 UTC2017-01-01 00:00:00 UTC422
20172017-01-01 00:00:00 UTC2018-01-01 00:00:00 UTC000
20182018-01-01 00:00:00 UTC2019-01-01 00:00:00 UTC000
20192019-01-01 00:00:00 UTC2020-01-01 00:00:00 UTC000
20202020-01-01 00:00:00 UTC2021-01-01 00:00:00 UTC000
20212021-01-01 00:00:00 UTC2022-01-01 00:00:00 UTC202

What Hacker News says

17 sources
LukasReschke·Jan 22, 2021
> Most rewrites fails because the team rewriting is not the team that did the initial development. Looking at https://github.com/owncloud/core/graphs/contributors, most of the initial core contributors contribute now to Nextcloud instead. I am interested in seeing how the rewrite affects end-users. Currently, it seems to be mainly focused on File Sync and I don't see things such as calendar or contacts management. (they totally could appear in the future though) I'd assume that limiting the scope of components, makes a rewrite also easier. Nextcloud for example has a ton of hooks that allow you to write apps to customize the behaviour (want users to sign the ToS before downloading a share? Should be doable etc.). When you leave these out, implementing new things just got a whole lot easier :) (so I guess I am envious on the fact that they
Read the rest
got rid of a ton of backwards compatible APIs to maintain :-) ) Disclaimer: Contributed to ownCloud for a few years, then to Nextcloud.
In ownCloud Infinite Scale: Go instead of PHP, microservices instead of LAMP
LukasReschke·Jan 22, 2021
> Plus as far as I know neither ownCloud nor nextCloud went through a security audit This is inaccurate. Nextcloud does receive security audits and is in fact also used by quite some security-conscious organizations (to name a few: German Government, Siemens, ...) There's also a bug bounty program that pays pretty decently considering the company size: https://hackerone.com/nextcloud. (Remote Code Execution = 10k, Auth Bypass = 4k - compare that to rewards that the FAANG pays and you'll see it's not that bad) > and they are big piles of PHP with a lot more complexity than Seafile I did a small audit of Seafile years ago and I don't think that argument flies. For example, they copied https://github.com/django/django/blob/23c612199a8aaef52c3c7e... to https://github.com/haiwen/seahub/blob/b6f8935c0f355cc70145f9... and removed some security-c
Read the rest
ritical checks. They removed the check for the password hasht here. (https://github.com/django/django/blob/23c612199a8aaef52c3c7e...) Furthermore, the Django secret key was generated as shown at https://github.com/haiwen/seahub/blob/b6f8935c0f355cc70145f9.... ``` def random_string(): """ Generate a random string (currently a random number as a string) """ return str(random.randint(0,100000)) ``` That's not really secure and copy-pasting Django core code and then removing security checks ... is shady at best. Disclaimer: I wrote a significant part of the ownCloud code (https://github.com/owncloud/core/graphs/contributors), then forked it into Nextcloud. After some years I moved to Facebook to do application security there :-)
In ownCloud Infinite Scale: Go instead of PHP, microservices instead of LAMP
scr4ve·Dec 15, 2015
I don't really get why one wants to trust ownCloud with private files: - "logging changes": https://github.com/owncloud/core/commit/eea96298951805dfc6eb... vs https://owncloud.org/security/advisory/?id=oc-sa-2014-020 - ownCloud is a PHP application with quite a few third-party modules of varying quality. Looking at the security history of Wordpress, it's not hard to imagine what's going to happen. - The maximum bug bounty for ownCloud is 500 USD. I think my data easily exceeds that. - From what I've heard, security fixes are provided to enterprise customers first, so if you're lucky your adversary is one of them and knows about vulnerabilities way ahead of you. To their credit, ownCloud openly publishes security advisories for every vulnerability, but I still think it's architecturally designed to fail. Exposing this to the internet is pr
Read the rest
obably a bad idea. If you just need storage, you probably should just use dumb storage. If you need project management stuff and care about privacy, maybe look at https://protonet.info/ or something along those lines. Also https://www.boxcryptor.com is really nice - the Dropbox desktop client does proper cert pinning (ownCloud doesn't) at least. Other than that, storage connected to a raspi via USB will probably yield rather bad transfer speeds?
In Western Digital and OwnCloud Team Up to Bring OwnCloud to Home Users
jancborchardt·Nov 15, 2015
If you really have problems with ownCloud, then please report them at our issue tracker https://github.com/owncloud/core/issues in more detail than »eats files«. Then we can actually fix the problem. About the delta sync: There’s plans being made and work being done on it. It’s locked because all people get notified on every »+1« comment and that doesn’t help to focus and get actual work done. Besides, do you really believe that USD 1200 will swiftly take care of implementing this feature?
In Self-hosted alternatives to popular cloud services
unhammer·May 30, 2014
The one I use most in addition to ownCloud is http://subsonic.org/ – after I ripped my full music collection I no longer felt the need for a Spotify subscription. Subsonic has a really nice Android app, but the only iPhone app I found was quite confusing, so if you're using an iPhone you should probably … make a new app :) BTW, ownCloud used to have a remoteStorage provider plugin that would've been useful for Laverna, but it was removed due to various issues :-/ https://github.com/owncloud/core/wiki/Project%20ideas#ownclo... may lead to a new one
In Laverna: Self-hosted Evernote alternative
jancborchardt·Apr 12, 2014
Simple syncing is what ownCloud does. Of course technically a server is inbetween, so it’s not directly between devices. LAN sync is requested sometimes, but currently not a priority. Please do let us know about the things you miss – on our issue tracker at http://github.com/owncloud/core/issues And if you use IRC you’re welcome in #owncloud-dev (freenode). And be sure that we have a lot of improvements lined up for ownCloud 7 which will come out in a few weeks. EDIT: Also, if you have specific feedback on ownCloud’s usability and design let me know, I work on that.
In Condoleezza Rice Joins Dropbox’s Board As It Names New CFO, COO
ChuckMcM·Nov 17, 2013
Yeah, I could see why dropping that stuff on it would pretty much swamp it. Of course your running a giant PHP infrastructure [1] there which was built the way it was in part because memory and cpu cycles were "free." What I'm saying is that you could implement the equivalent of OwnCloud and CalendarServer on the Pi knowing that it needed to be memory and CPU efficient, and no doubt get 300 - 500mS responses. But that would mean not using frameworks that start by assuming you have at least 1GB of memory free and can run an interpreter (PHP) on an interpreter (JS) on the actual code. Looking at the code for these I think the biggest issue is memory for them. A 2G Pi would probably do what you needed, trying to swap on the Pi (especially if you do that to an SD card) makes it really really slow. Its better if you can swap to an NFS mounted
Read the rest
file system, and even cooler if you can swap to a custom memory instance in another server :-) [1] https://github.com/owncloud/core
In Two million Raspberry Pi sold

Showing the 15 most recent of 17 sources. Enable JavaScript to search and browse every indexed mention.

MAKE YOURSELF AT HOME

A few shortcuts

/
Search the collection
?
Open this guide
Esc
Close dialogs and navigation

Your saved repositories and interests stay in this browser.