3 ms·
Safe way to upload files to Dropbox from an untrusted computer
- sophacles 12y agoThis seems very similar to SQRL.... https://www.grc.com/sqrl/sqrl.htm https://www.grc.com/sqrl/sqrl.htm how much does it differ?
- sepeth 12y agoI didn't know about SQRL, but from what I understand from the author own post on medium, this authentication idea isn't something that he invented: https://medium.com/@frontsideair/a-summer-spent-studying-part-ii-c038f87e60de https://medium.com/@frontsideair/a-summer-spent-studying-par...
- frontsideair 12y agoAuthor here. I haven't seen SQRL and I'll check it in detail later. It looks like a more complicated thing than what I did and much more work compared to a simple, hackathon-like project. My project works only on Dropbox and it doesn't require Dropbox to support any other authentication mechanism. It just uses OAuth2 behind the scenes.
- socceroos 12y ago'Safe' from the sense that it makes it difficult to compromise the security credentials of your account. However, this will do nothing to stop you from inadvertently uploading ransomware to your account.
- frontsideair 12y agoWell of course it has no anti-malware features, the only protection it has is that no credentials are sent to the client, just an authorization token, which you can disable using your phone.
- pXMzR2A 12y agoAFAIK Dropbox is an untrusted computer. https://en.wikipedia.org/wiki/Condoleeza_Rice#Role_in_authorizing_use_of_controversial_interrogation_techniques https://en.wikipedia.org/wiki/Condoleeza_Rice#Role_in_author...
- frontsideair 12y agoI supported Drop-dropbox.com when I first heard about it, but since nothing's changed since then I guess it was unsuccessful.
- greggarious 12y agoI agree, but so are most cloud services: [1] https://en.wikipedia.org/wiki/PRISM_%28surveillance_program%29 https://en.wikipedia.org/wiki/PRISM_%28surveillance_program%... [2] https://en.wikipedia.org/wiki/XKEYSCORE https://en.wikipedia.org/wiki/XKEYSCORE With Dropbox at least I can encrypt my data before uploading.
- prakash-news 12y agowell actually dropbox is highly relevant enough for the technology, i could grab a depth within this concept, just point i was lacking is about SQRL