DropTunes. Your Music + Dropbox

droptun.es

23 points·janektm··9 comments

I don't like the idea of entering my Dropbox credentials directly into an untrusted site. Doesn't Dropbox have any safer means of authentication for these kinds of services, like twitter or facebook offer?

Seems like a cool service, though.

the dropbox api has oauth for this exact purpose. they also have an endpoint (a la xAuth) that returns a token in exchange for credentials, but afaik, it's reserved for mobile apps that don't want to deal with the oauth dance.

Not only is it unsafe, but it makes your folder completely public, which is just begging for legal action by the music industry.

The root URL https://droptun.es/ is an apache welcome page. I think I'd need a bit more information about the people behind this before entering my dropbox username and password into the login form.

This site has blatant security flaws, try inserting '"><h1> into either the username or password field and see what it returns.

Username/password shouldn't actually be needed for this functionality. Just sharing a folder with music would be enough.

As a new user just discovering this website, I need following information:

- What does DropTunes do? Not everyone understands what "Your Music" + "Dropbox" means. Actually, most normal people don't know Dropbox at all.

- Are there also mobiles apps? Can I use that on my phone? My iPad? If I don't know I don't want to try it.

- Where should I put my music on Dropbox? Why does it needs my credentials? Could as well use my public folder.

Perhaps this could be an alternative: http://grooveshark.com/

I don't know if i can trust this site :S

@janektm thanks for the url, looks like a great service

Reply on news.ycombinator.com