4 ms·
I realize that a lot of people feel deceived, and they should have been much clearer, but isn’t this kind of expected? TomasSedovic and I have commented on this
by guan 15y ago
I realize that a lot of people feel deceived, and they should have been much clearer, but isn’t this kind of expected? TomasSedovic and I have commented on this before, but I still think there are so many features that suggest that this is exactly how they protected files. Some examples:
1. While the various clients (desktop, iPhone, etc) could probably do per-user encryption, the web interface doesn’t spend a lot of time decrypting files in JavaScript (or Java or Flash or some other way of doing it).
2. Even large files can be instantly moved to “Public”.
3. The fact that it’s possible to instantly share an entire folder with someone else.
There’s probably some way to do each of these with proper encryption. For point 3, maybe having a separate key for each folder, then giving others access to that key when you share. And with some creativity there are probably ways to implement every Dropbox feature in a fully secure way.
But to someone who is somewhat familiar with security issues, all of Dropbox just “feels” like a service where they have access to everything (with proper access controls of course). Thoughts?
I’ve certainly been a lot more careful about what I put in my Dropbox, unlike Backblaze where I trust the encryption more (but not fully).
- Vitaly 15y agoI'm using Backblaze but I want to move exactly because I don't trust them. And the reason is the stupid way the restore is done. You have to give them the password and they decrypt it for you. You can't get encrypted files and decrypt yourself. Stupid. FAIL.