Hacker News Reader

Comment by josh2600 | Hacker News Reader

Given Dropbox's absolutely glacial pace of feature progression, no it would not be easy. I mean, all of dropbox runs off of one set of private keys...

https://www.dropbox.com/en/help/28

View on HN

Dropbox works with the NSA to hand over customer data. You are absolutely right that something like this would go over like a turd in a punchbowl at Dropbox HQ.

Unlike Google, Microsoft and Slack, Dropbox does have the top, 5 star, EFF rating for protecting your data from the government... I'm not sure what more they could be doing.

Edit to add link to EFF ratings: https://www.eff.org/who-has-your-back-government-data-reques...

They could do client side encryption.

You trust the end users to back up their private keys?

I don't care what other people do. I want client side encryption!

At least on Linux/OSX/Android, you can use encfs to have a encrypted directory tree.

Then use tarsnap already. Bonus: it is owned by our own cperciva.

tarsnap is nerdish, secure and reasonably priced for what it provides IIRC. Haven't used it though but expect someone would have yelled out here if it was bad. (In fact the only one I've seen bashing it was patio11, -because it was too cheap and too nerdish.)

tptacek also complains that tarsnap is too nerdish. :-)

Spideroak can do it without private keys to back up.

Their profitability depends on being able to dedupe and compress data across all customers. They would need to raise prices significantly to make client side encryption a built in feature.

As the recent Schrems case in the CJEU said, any data held in the USA is no secure.

Thanks for adding facts. Do they still have that questionable(?) politician on the board?

Are we THAT forgetful? http://kiledjian.com/main/2013/6/7/nsa-is-using-google-faceb...

Dropbox was listed on PRISM documents. Are you kidding me?

By all means, just make stuff up. You've come to the right venue.

Reply on news.ycombinator.com