6 ms·
> Dropbox is a poster child for “this should be E2E encrypted” how would you implement some very trivial features like even being able to search though
by VWWHFSfQ 3y ago
> Dropbox is a poster child for “this should be E2E encrypted”
how would you implement some very trivial features like even being able to search though
- rvnx 3y agoAt least basic encryption. Remember one day, Dropbox forgot in production to check passwords of users. So you only had to enter email to access the Dropbox of the user (an open "log as" feature).
- YetAnotherNick 3y agoWhat do you mean by "basic encryption". Either dropbox could access our files or it couldn't without authentication from us. If it couldn't how would search or indexing work.
- ginsbergjason 3y agoThats crazy, do you know if there's an article about Dropbox breaking auth? Don't remember hearing about it.
- rvnx 3y agohttps://www.cnet.com/news/privacy/dropbox-confirms-security-glitch-no-password-required/ https://www.cnet.com/news/privacy/dropbox-confirms-security-...
- jbverschoor 3y agoOr the time when they simply sent your complete file structure to some random company without any consent or information?
- ginsbergjason 3y agowe've implemented E2EE search (and pretty much every feature you would expect) on https://skiff.com/drive https://skiff.com/drive
- drstewart 3y agoare you pledging to make every new feature that's ever developed opt-in on risk of jail time for you personally?
- PeterisP 3y agoI've used Dropbox for 13 years and I have never noticed that they have a cloud search feature, nor have I ever needed that. It syncs to my machines where I have my local search working in the exact same manner as for non-Dropbox data - why does Dropbox need a special search, one where they would search my unencrypted data?