4 ms·
The point is that it would break features for many users in exchange for security theater. Limiting the access of Dropbox is all well and great except that it
by alphabettsy 10y ago
The point is that it would break features for many users in exchange for security theater.
Limiting the access of Dropbox is all well and great except that it breaks sharing, which many people use, in exchange you simply move the files to another folder on the same Dropbox which effectively does nothing.
Slightly off topic, but Who stores senstive files unencrypted in Dropbox anyways?
- Pharylon 10y agoI do. I keep my backup 2-factor authentication code for gmail in my Dropbox folder. Access to my Dropbox account would compromise my gmail account (and vice versa, since I keep my backup Dropbox 2-factors in Google Drive). I consider these two accounts my most sensitive/critical accounts for that reason. Could I encrypt the files in Dropbox? Sure. But that would make it more difficult to get to those backup keys (I might be reading them off a text file from the Dropbox app on my phone, for instance). Has this happened often? No. Like, literally once. But it has happened, and I need to be able to recover my backup 2-factor codes.
- x1798DE 10y agoIf they are your most critical accounts, why are you doubling the attack surface by allowing a compromise of either to compromise both?
- danieldk 10y agoI do. I keep my backup 2-factor authentication code for gmail in my Dropbox folder. Why not use a physical 2nd factor such as a U2F key?
- alphabettsy 10y agoThis is the whole purpose of using a password manager. 1Password is capable of providing OTP codes instead of something like Google Auth. Obviously this makes 1Password a single point of failure, but that's true of password managers in general anyways since people usually put all of their sensitive things into them. At least with 1Password you can isolate items into vaults.