3 ms·
Well, it gives careless users more rope to hang themselves, but I'm not sure it changes anything in principle. The Linux version at least works by running a bi
by rst 16y ago
Well, it gives careless users more rope to hang themselves, but I'm not sure it changes anything in principle. The Linux version at least works by running a binary that they ship you, which runs with your uid and communicates with their servers. Short of building from source yourself (if you can get the source!), you already have to trust them to ship code which looks at only the stuff that they're supposed to be looking at, and not to be rifling through your firefox history on the side.
- pdx 16y agoIt's not dropbox I'm worried about, so much as the fact that a system that has the ability to make public any file at the owners direction, could be potentially exploited to make public any file without the owners direction. Are non-public files now accessible to third parties who have the correct url? Is there code that maps encoded url's to every file in my dropbox? If so, this is a security vulnerability that is not present currently.
- TheUSMarshall 16y agoNon-shared files are inaccessible to anyone who isn't logged into that Dropbox account... if it's not shared by the user, it's not accessible.