Author Topic: Deduplication, encryption, security and... Dropbox (Read 64,473 times)

Deozaan · « **Reply #50 on:** May 23, 2011, 06:36 AM »

Quote from: phitsc on May 06, 2011, 03:38 PM

And here comes the "workaround":

http://lifehacker.com/5799313/secretsync-secures-your-sensitive-files-before-syncing-them-to-dropbox-and-weve-got-beta-invites

That SecretSync looks neato. Thanks!

Armando · « **Reply #51 on:** May 23, 2011, 06:18 PM »

I installed it 2 weeks ago and it feels unfinished. Did you try it ?
I don't think I was offered to chose the location of the "SecretSync" folder (in Windows XP, the default (only?) location is in C:\Documents and Settings\). Are/were you able to select the location of the SecretSync Folder?

Deozaan · « **Reply #52 on:** May 23, 2011, 11:21 PM »

Quote from: Armando on May 23, 2011, 06:18 PM

I installed it 2 weeks ago and it feels unfinished. Did you try it ?
I don't think I was offered to chose the location of the "SecretSync" folder (in Windows XP, the default (only?) location is in C:\Documents and Settings\). Are/were you able to select the location of the SecretSync Folder?

Yeah I tried it.

No, I wasn't able to select the location. It just goes into my User directory. It's kind of a bummer that it makes Dropbox a bit more inconvenient to use, but since I'm only putting select files where encryption is important to me in there, I guess I probably won't need to use it that often.

kyrathaba · « **Reply #53 on:** May 29, 2011, 12:36 PM »

Another interesting article on Dropbox insecurity.

kyrathaba · « **Reply #54 on:** May 29, 2011, 12:38 PM »

If you are going to store data online always encrypt it locally first in your computer, never trust a third party service like Dropbox or Hushmail with your data even if they tell you they can’t access it and that everything is fine, the bottom line here is that they have access to the decryption key.

Besides the chances of encryption implementations being flawed by your online storage service, they can do anything they like with the decryption keys, if you send the data already encrypted to your online storage space you will be the only one who can decide when and how to decrypt your confidential files, you will also protect yourself from a rogue employee tempted to look at your confidential files.

PS: I am adding Dropbox to my shit list.

phitsc · « **Reply #55 on:** May 30, 2011, 06:51 AM »

Quote from: kyrathaba on May 29, 2011, 12:36 PM

Another interesting article on Dropbox insecurity.

Hm, kind of dilettantish. It fits though. Thanks for sharing.

wreckedcarzz · « **Reply #56 on:** June 06, 2011, 10:03 PM »

Bump for information about whether Syncplicity (http://www.syncplicity.com/) has any similar issues - I've been using it a few months because I tried it and liked it, but as far as I can tell, it offers no encryption or protection past the login process. I don't store sensitive stuff on it (Documents/Music/Desktop) but I would much rather have my data stay that way- mine only.

Anyone know? Or have an alternative?

tomos · « **Reply #57 on:** June 07, 2011, 06:46 AM »

Quote from: wreckedcarzz on June 06, 2011, 10:03 PM

Anyone know? Or have an alternative?

have a look at page 1 of this thread - f0dder makes a couple of posts about Spider Oak and Wraith talks about Jungle Disk (http://www.donationcoder.com/forum/index.php?topic=26392.msg245671#msg245671).
Both positive. I use Spider Oak but just for backup - it has trouble with databases but otherwise seems okay.

More about Spider oak here - SpiderOak - very nice people =)

wreckedcarzz · « **Reply #58 on:** June 07, 2011, 08:59 AM »

I'm using JungleDisk as a Dropbox replacement, but I need something that does sync of in-place folders for me as well as offline access. I'd rather avoid JD for this purpose because I'm cheap and don't want to spend ~30 cents for another 2GB of space on top of the 5 you get.

I haven't looked at SpiderOak yet, but it looks like it is one folder dedicated to the app that it syncs - I need in-place folder sync.

tomos · « **Reply #59 on:** June 07, 2011, 10:32 AM »

Quote from: wreckedcarzz on June 07, 2011, 08:59 AM

I haven't looked at SpiderOak yet, but it looks like it is one folder dedicated to the app that it syncs - I need in-place folder sync.

it isn't the case for backup - but it could be for sync.
Just had a quick look:

you select a folder to sync (any folder)
Also you can sync one folder to as many other folders as you want (just add path)
you can create as many 'syncs' as you want

edit/ in an attempt to be more articulate

wreckedcarzz · « **Reply #60 on:** June 07, 2011, 11:58 PM »

Ah okay, that sounds like it works how I want. Downloading now

Last-second edit: If anyone has a referral code that they want to use or anything like that, I'll use that. I'm all for more free space.

Deozaan · « **Reply #61 on:** June 08, 2011, 12:10 AM »

Quote from: wreckedcarzz on June 07, 2011, 11:58 PM

Last-second edit: If anyone has a referral code that they want to use or anything like that, I'll use that. I'm all for more free space.

Here's mine:

https://spideroak.com/download/referral/28b0b737a436a9ff589d1bfd3d51ad9e

Armando · « **Reply #62 on:** June 21, 2011, 06:01 PM »

Some cross-linking... :
Dropbox Left User Accounts Unlocked for 4 Hours Sunday

Plus this : Now anyone, not just cops with a warrant, can peek inside your Dropbox

(Note that the last link isn't all that great... just another reference...)

JavaJones · « **Reply #63 on:** July 06, 2011, 01:19 AM »

May be useful for those still using DropBox and wanting improved security:
http://www.betanews.com/article/Take-advantage-of-Dropbox-revised-terms-of-service-with-SecretSync/1309789852
(sorry for the link to Betanews

)
For free 2GB DropBox accounts both apps are free. If you're going to pay for encryption on DropBox though (for accounts larger than 2GB), might as well just use SpiderOak.

- Oshyan

f0dder · « **Reply #64 on:** July 17, 2011, 11:43 PM »

Quote from: kyrathaba on May 29, 2011, 12:38 PM

If you are going to store data online always encrypt it locally first in your computer, never trust a third party service like Dropbox or Hushmail with your data even if they tell you they can’t access it and that everything is fine, the bottom line here is that they have access to the decryption key.

Good advice if you use a crap service like DropBox - unnecessary if you use something that incorporates client-side security (SpiderOak).

kyrathaba · « **Reply #65 on:** July 18, 2011, 11:47 PM »

Quote

If you're going to pay for encryption on DropBox though (for accounts larger than 2GB), might as well just use SpiderOak.

And the jury is still out on SpiderOak as far as I'm concerned. I still haven't heard back on my support issue, as discussed here.

J-Mac · « **Reply #66 on:** July 20, 2011, 02:02 AM »

Quote from: kyrathaba on July 18, 2011, 11:47 PM

Quote
If you're going to pay for encryption on DropBox though (for accounts larger than 2GB), might as well just use SpiderOak.

And the jury is still out on SpiderOak as far as I'm concerned. I still haven't heard back on my support issue, as discussed here.

Well, at least it isn't because of a security problem!

Jim

TheQwerty · « **Reply #67 on:** July 20, 2011, 04:20 PM »

Quote from: J-Mac on July 20, 2011, 02:02 AM

Well, at least it isn't because of a security problem!

I actually think that makes it worse. How can one trust their security code if they're having this much of a problem detecting how much space a user is using vs what they're allotted?

tomos · « **Reply #68 on:** July 20, 2011, 04:24 PM »

Quote from: TheQwerty on July 20, 2011, 04:20 PM

Quote from: J-Mac on July 20, 2011, 02:02 AM
Well, at least it isn't because of a security problem!

I actually think that makes it worse. How can one trust their security code if they're having this much of a problem detecting how much space a user is using vs what they're allotted?

could be "just" that they really dont want to give those 50 gigs away any more....

J-Mac · « **Reply #69 on:** July 20, 2011, 05:10 PM »

Quote from: TheQwerty on July 20, 2011, 04:20 PM

Quote from: J-Mac on July 20, 2011, 02:02 AM
Well, at least it isn't because of a security problem!

I actually think that makes it worse. How can one trust their security code if they're having this much of a problem detecting how much space a user is using vs what they're allotted?

Quite simple - I don’t equate the two. One issue is "security", plain and simple. How does getting free space for referrals relate to security? It may well affect your ability to like the developers. It may affect your general trust in what they tell you. However their security measures have been testified to by many who have no stake in the other aspects of their business.

I might not like these folks because of my free space issues... but their security is still better than a lot out there.

Jim

phitsc · « **Reply #70 on:** April 13, 2012, 07:16 AM »

Seems like there's no way around Dropbox if you're an iTunes-shunning, no-other-Apple-products using user

. It seems to be the de-facto alternative to iCloud (which has no Windows client that can automatically sync documents at the moment).

So if someone still needs a Dropbox account and wants to help me get more free space, please use the following referral link:

http://db.tt/Z94sjE0

Carol Haynes · « **Reply #71 on:** April 13, 2012, 09:23 AM »

What about MS SkyDrive?

http://windows.microsoft.com/en-GB/skydrive/home

I haven't tried it but it does include at least some sync features.

J-Mac · « **Reply #72 on:** April 13, 2012, 03:36 PM »

I had set up a SkyDrive account a while back but didn't really use it. However now that I have both an iPad 2 and an Android "dumbass" phone, I wanted to view/add/edit my OneNote 2010 notebooks on them. I set them up to sync to SkyDrive and they are now auto-synced to all devices. Pretty coll and seems to work OK... for now!

BTW, has anyone tried Insync yet? No, no - not 'NSync or Justin Timberlake and all that! Insync is a service whose UI looks a lot like Dropbox and syncs to your GDocs. The buzz they're pushing hard is how much less expensive Google's data storage is than Dropbox. (E.g., $100 buys you only 50 GB with Dropbox, but 400 GB with Google Cloud storage.) Sounds very interesting! Of course the features available with GDocs and Dropbox are different but that price break sure is tempting. I just renewed with Dropbox in January so I'm going to have my 50 GB account there for another year anyway, but I think I might give Insync a try. If it works for me then bye-bye Dropbox.

Some links for Insync articles/reviews:

Techcrunch: http://techcrunch.com/2011/12/30/insync-dropbox-revamp-free/

Engadget: http://www.engadget.com/2012/01/04/insync-wave-bye-bye-bye-to-dropbox/

Thanks!

Jim

phitsc · « **Reply #73 on:** April 15, 2012, 09:15 PM »

Thing is: it looks to me like many iPad apps have Dropbox support built into them.

J-Mac · « **Reply #74 on:** April 16, 2012, 02:13 AM »

Quote from: phitsc on April 15, 2012, 09:15 PM

Thing is: it looks to me like many iPad apps have Dropbox support built into them.

Yeah, but there seems to be a goodly number that can interface with GDocs also. At least some that I have. I still have my Dropbox account but I also installed Insync to check it out. First issue I see is that a lot of my GDocs are files I uploaded from my PC, so now I have those files in their original locations and also in the Insync folder. Doubled up on those files.

Jim