4 ms·
Well, this was just scanning the public/ folders, the files in which are accessible to anyone that has (or, in this case, can guess) the link. Now, if it's som
by jackowayed 17y ago
Well, this was just scanning the public/ folders, the files in which are accessible to anyone that has (or, in this case, can guess) the link.
Now, if it's something you absolutely must keep private, you shouldn't even store it in the private parts of your dropbox folder, but for things where it's not a huge deal if it ends up public, Dropbox is reasonably safe assuming you're not stupid about it (strong password, etc).
- chaosmachine 17y agoAs far as I can tell, private folders are also subject to this URL leaking problem, but in a somewhat limited way. If someone can grab the URL to your "recent changes" RSS feed (events.xml), they can watch every file change you make, and view any image you upload, without being logged in to your account. If anyone from Dropbox wants to correct me on this, or wants more details, my contact info is in my profile.
- Groxx 17y agoThumbnails, but yes. Just tested it. Wasn't aware of that, but doesn't matter too much for me. I don't use it for images, am not ashamed of my images, and you only see what file was changed, not the changes made. An unlikely security problem, but probably a bad idea anyway. With a little complaining, I'd bet they'd put up an opt-out option, take out image thumbnails, and hopefully a layer of security over the feed.
- chaosmachine 17y agoYou can get full sized images if you play with the URL (change /i/s/ to /i/o/).
- morbidkk 17y agoYou can keep encrypted data on dropbox http://wiki.dropbox.com/TipsAndTricks/IncreasePrivacyAndSafety http://wiki.dropbox.com/TipsAndTricks/IncreasePrivacyAndSafe... Am using TrueCrypt for private data in private folders