Hacker News Reader

Comment by tgb | Hacker News Reader

What exactly are you referring to? My life is stored on Dropbox so I'd rather like to know.

37signals, not Dropbox: Trust is Fragile | https://news.ycombinator.com/item?id=3470876 (2012)

>foreverbanned: They didn't mentioned the filename at first. What they actually said was: "And a Basecamp user uploaded the 100,000,000th file (It was a picture of a cat!)"

AFAIK there is no equivalent Dropbox incident, though they were forced to clarify their marketing in 2011: https://en.wikipedia.org/wiki/Criticism_of_Dropbox#May_2011_...

Dropbox doesn’t encrypt your data. There area bunch of other companies that do encrypted cloud storage, eg keybase

Yes it does, see https://www.dropbox.com/security

Decryption keys are stored on Dropbox's servers, which makes this encryption pointless if the company turns evil.

Not all decryption needs to be end to end encryption. I’m not sure when this idea developed, but it’s silly.

If your threat model mandates that you use end to end encryption, go for it, and choose something other than Dropbox. But saying the encryption is pointless just because the organization that manages the keys could become “evil” is hyperbole.

Dropbox deduplicates files across user accounts to minimize storage. Effectively, this means all accounts share one private key for encryption...

Edit: to be clear, I believe it is an option on enterprise accounts to use your own key.

This shouldn’t be downvoted. The page states clearly that data is encrypted both in transit and at rest.

I want web access to my files in Dropbox, so E2E encryption is not an option. Ok, you could do decryption in the browser, but I wouldn't trust that.

Reply on news.ycombinator.com