4 ms·

What exactly are you referring to? My life is stored on Dropbox so I'd rather like to know.

by tgb 9y ago

anubisresources 9y ago
Dropbox doesn’t encrypt your data. There area bunch of other companies that do encrypted cloud storage, eg keybase
- daniel_iversen 9y ago
  Yes it does, see https://www.dropbox.com/security https://www.dropbox.com/security
  - progval 9y ago
    Decryption keys are stored on Dropbox's servers, which makes this encryption pointless if the company turns evil.
    - dsacco 9y ago
      Not all decryption needs to be end to end encryption. I’m not sure when this idea developed, but it’s silly. If your threat model mandates that you use end to end encryption, go for it, and choose something other than Dropbox. But saying the encryption is pointless just because the organization that manages the keys could become “evil” is hyperbole.
      - josh2600 9y ago
        Dropbox deduplicates files across user accounts to minimize storage. Effectively, this means all accounts share one private key for encryption... Edit: to be clear, I believe it is an option on enterprise accounts to use your own key.
  - dsacco 9y ago
    This shouldn’t be downvoted. The page states clearly that data is encrypted both in transit and at rest.
- TorKlingberg 9y ago
  I want web access to my files in Dropbox, so E2E encryption is not an option. Ok, you could do decryption in the browser, but I wouldn't trust that.
book_mentioned 9y ago
37signals, not Dropbox: Trust is Fragile | https://news.ycombinator.com/item?id=3470876 https://news.ycombinator.com/item?id=3470876 (2012) >foreverbanned: They didn't mentioned the filename at first. What they actually said was: "And a Basecamp user uploaded the 100,000,000th file (It was a picture of a cat!)" AFAIK there is no equivalent Dropbox incident, though they were forced to clarify their marketing in 2011: https://en.wikipedia.org/wiki/Criticism_of_Dropbox#May_2011_data_deduplication_and_employee_access https://en.wikipedia.org/wiki/Criticism_of_Dropbox#May_2011_...

What exactly are you referring to? My life is stored on Dropbox so I'd rather like to know.

by tgb 9y ago

What exactly are you referring to? My life is stored on Dropbox so I'd rather like to know.

anubisresources 9y ago

Dropbox doesn’t encrypt your data. There area bunch of other companies that do encrypted cloud storage, eg keybase

daniel_iversen 9y ago
Yes it does, see https://www.dropbox.com/security https://www.dropbox.com/security
- progval 9y ago
  Decryption keys are stored on Dropbox's servers, which makes this encryption pointless if the company turns evil.
  - dsacco 9y ago
    Not all decryption needs to be end to end encryption. I’m not sure when this idea developed, but it’s silly. If your threat model mandates that you use end to end encryption, go for it, and choose something other than Dropbox. But saying the encryption is pointless just because the organization that manages the keys could become “evil” is hyperbole.
    - josh2600 9y ago
      Dropbox deduplicates files across user accounts to minimize storage. Effectively, this means all accounts share one private key for encryption... Edit: to be clear, I believe it is an option on enterprise accounts to use your own key.
- dsacco 9y ago
  This shouldn’t be downvoted. The page states clearly that data is encrypted both in transit and at rest.
TorKlingberg 9y ago
I want web access to my files in Dropbox, so E2E encryption is not an option. Ok, you could do decryption in the browser, but I wouldn't trust that.

book_mentioned 9y ago

37signals, not Dropbox: Trust is Fragile | https://news.ycombinator.com/item?id=3470876 https://news.ycombinator.com/item?id=3470876 (2012) >foreverbanned: They didn't mentioned the filename at first. What they actually said was: "And a Basecamp user uploaded the 100,000,000th file (It was a picture of a cat!)" AFAIK there is no equivalent Dropbox incident, though they were forced to clarify their marketing in 2011: https://en.wikipedia.org/wiki/Criticism_of_Dropbox#May_2011_data_deduplication_and_employee_access https://en.wikipedia.org/wiki/Criticism_of_Dropbox#May_2011_...