Hacker News Reader

Comment by bduerst | Hacker News Reader

Maybe this is a tangental question, but wouldn't it be relatively easy for dropbox to implement this?

Or are you saying you prefer the command line interface?

Given Dropbox's absolutely glacial pace of feature progression, no it would not be easy. I mean, all of dropbox runs off of one set of private keys...

https://www.dropbox.com/en/help/28

Dropbox works with the NSA to hand over customer data. You are absolutely right that something like this would go over like a turd in a punchbowl at Dropbox HQ.

Unlike Google, Microsoft and Slack, Dropbox does have the top, 5 star, EFF rating for protecting your data from the government... I'm not sure what more they could be doing.

Edit to add link to EFF ratings: https://www.eff.org/who-has-your-back-government-data-reques...

Are we THAT forgetful? http://kiledjian.com/main/2013/6/7/nsa-is-using-google-faceb...

Dropbox was listed on PRISM documents. Are you kidding me?

They could do client side encryption.

Their profitability depends on being able to dedupe and compress data across all customers. They would need to raise prices significantly to make client side encryption a built in feature.

You trust the end users to back up their private keys?

I don't care what other people do. I want client side encryption!

Then use tarsnap already. Bonus: it is owned by our own cperciva.

tarsnap is nerdish, secure and reasonably priced for what it provides IIRC. Haven't used it though but expect someone would have yelled out here if it was bad. (In fact the only one I've seen bashing it was patio11, -because it was too cheap and too nerdish.)

tptacek also complains that tarsnap is too nerdish. :-)

At least on Linux/OSX/Android, you can use encfs to have a encrypted directory tree.

Spideroak can do it without private keys to back up.

Thanks for adding facts. Do they still have that questionable(?) politician on the board?

As the recent Schrems case in the CJEU said, any data held in the USA is no secure.

By all means, just make stuff up. You've come to the right venue.

I like the social proof, I like the crypto, I like the command-line as well.

Reply on news.ycombinator.com