6 ms·

This is assuming the Government doesn't force Dropbox to install a keylogger on their client to get users TrueCrypt passphrases and possibly keyfiles.

a3_nm 13y ago
If Dropbox bundled a keylogger with the Dropbox client, I'm pretty sure it would eventually attract some attention...
- webjprgm 13y ago
  Yeah, 4 years later when a whistle blower said something.
- pasbesoin 13y ago
  Who's to say they can't be convinced to push a one-off update to your account/machine. Perhaps a transitory one, to help cover their tracks? The underlying problem is that you're trusting closed client software from a third-party. Once that is running on your system, arguably it's game over as far as what Dropbox or its like can and can't do to you. (If you trust them, ok. But when documents state that "they're next", many of us start to wonder. And again, this isn't just access to a server. Through their client software, this is access to your machine, that you've already granted. Admittedly, I'm describing the typical Dropbox user scenario and not where the client is manually applying -- or not -- each update, and somehow supposedly gaining insight into the capabilities of each update/version before doing so. And I'm also ignoring various forms of restricting the access of the Dropbox client, although if they really want you, they and parties using them would have extensive resources to apply to breaking out of such constraints.)
  - mike-cardwell 13y ago
    https://grepular.com/Protecting_Your_GNU_Linux_System_from_Dropbox https://grepular.com/Protecting_Your_GNU_Linux_System_from_D...
    - pasbesoin 13y ago
      Thank you. I will read through this. Let me take the opportunity to also thank you for writing up your email best practices. I hope to implement them or something similar for myself. One of the challenges for me in all this is keeping up including with the implementation details. It feels akin to swimming upstream, with the current outpacing me.
    - tripzilch 13y ago
      Very interesting and useful, not just for securing DropBox either. FYI this article suggests to use encfs for an encrypted folder in your dropbox, this comment https://news.ycombinator.com/item?id=5855465 https://news.ycombinator.com/item?id=5855465 suggests that this might not be a wise choice, so you might want to (re)consider that part.

a3_nm 13y ago

If Dropbox bundled a keylogger with the Dropbox client, I'm pretty sure it would eventually attract some attention...

webjprgm 13y ago
Yeah, 4 years later when a whistle blower said something.
pasbesoin 13y ago
Who's to say they can't be convinced to push a one-off update to your account/machine. Perhaps a transitory one, to help cover their tracks? The underlying problem is that you're trusting closed client software from a third-party. Once that is running on your system, arguably it's game over as far as what Dropbox or its like can and can't do to you. (If you trust them, ok. But when documents state that "they're next", many of us start to wonder. And again, this isn't just access to a server. Through their client software, this is access to your machine, that you've already granted. Admittedly, I'm describing the typical Dropbox user scenario and not where the client is manually applying -- or not -- each update, and somehow supposedly gaining insight into the capabilities of each update/version before doing so. And I'm also ignoring various forms of restricting the access of the Dropbox client, although if they really want you, they and parties using them would have extensive resources to apply to breaking out of such constraints.)
- mike-cardwell 13y ago
  https://grepular.com/Protecting_Your_GNU_Linux_System_from_Dropbox https://grepular.com/Protecting_Your_GNU_Linux_System_from_D...
  - pasbesoin 13y ago
    Thank you. I will read through this. Let me take the opportunity to also thank you for writing up your email best practices. I hope to implement them or something similar for myself. One of the challenges for me in all this is keeping up including with the implementation details. It feels akin to swimming upstream, with the current outpacing me.
  - tripzilch 13y ago
    Very interesting and useful, not just for securing DropBox either. FYI this article suggests to use encfs for an encrypted folder in your dropbox, this comment https://news.ycombinator.com/item?id=5855465 https://news.ycombinator.com/item?id=5855465 suggests that this might not be a wise choice, so you might want to (re)consider that part.