Safe way to upload files to Dropbox from an untrusted computer

github.com

43 points·sepeth··9 comments

AFAIK Dropbox is an untrusted computer.

https://en.wikipedia.org/wiki/Condoleeza_Rice#Role_in_author...

I supported Drop-dropbox.com when I first heard about it, but since nothing's changed since then I guess it was unsuccessful.

I agree, but so are most cloud services: [1] https://en.wikipedia.org/wiki/PRISM_%28surveillance_program%... [2] https://en.wikipedia.org/wiki/XKEYSCORE

With Dropbox at least I can encrypt my data before uploading.

'Safe' from the sense that it makes it difficult to compromise the security credentials of your account. However, this will do nothing to stop you from inadvertently uploading ransomware to your account.

Well of course it has no anti-malware features, the only protection it has is that no credentials are sent to the client, just an authorization token, which you can disable using your phone.

This seems very similar to SQRL.... https://www.grc.com/sqrl/sqrl.htm how much does it differ?

I didn't know about SQRL, but from what I understand from the author own post on medium, this authentication idea isn't something that he invented:

https://medium.com/@frontsideair/a-summer-spent-studying-par...

Author here. I haven't seen SQRL and I'll check it in detail later. It looks like a more complicated thing than what I did and much more work compared to a simple, hackathon-like project.

My project works only on Dropbox and it doesn't require Dropbox to support any other authentication mechanism. It just uses OAuth2 behind the scenes.

well actually dropbox is highly relevant enough for the technology, i could grab a depth within this concept, just point i was lacking is about SQRL

Reply on news.ycombinator.com