Re: [liberationtech] Is Dropbox opening uploaded documents?

2013-09-16 Thread Joe Szilagyi
I assume that was directed toward me name dropping Dropbox. It wasn't; I 
thought they hyped at one point their encryption and not accessing your 
files. I guess I was mistaken. This is what Wikipedia says:


It also uses SSL transfers for synchronization and stores the data via 
AES-256 encryption, though this is done with Dropbox's own encryption 
keys, and not the users'.


For some reason I thought (incorrectly) that they lacked access/keys to 
the data. Another reason to roll your own or find a project that lets  
you encrypt around them I guess.


Anyway, it's all over the news now.

http://www.pcworld.com/article/2048680/dropbox-takes-a-peek-at-files.html
http://www.businessinsider.com/dropbox-privacy-2013-9
http://blogs.csoonline.com/data-privacy/2777/dropbox-peeking-your-files

- Joe Szilagyi


On 9/14/13 4:20 PM, Bernard Tyers - ei8fdb wrote:

On Fri, Sep 13, 2013 at 07:58:17AM +0200, Eugen Leitl wrote:

Dropbox is pulling a Skype.

no it's not, it's generating thumbnails. also this is advertising.

Hi,

I don't follow what you mean by advertising.

Thanks,
Bernard

--
Bernard / bluboxthief / ei8fdb

IO91XM / www.ei8fdb.org





-- 
Liberationtech is public  archives are searchable on Google. Violations of 
list guidelines will get you moderated: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, 
change to digest, or change password by emailing moderator at 
compa...@stanford.edu.

Re: [liberationtech] Is Dropbox opening uploaded documents?

2013-09-16 Thread Andy Isaacson
On Mon, Sep 16, 2013 at 08:47:09AM -0700, Joe Szilagyi wrote:
 I thought they hyped at one point their encryption and not
 accessing your files. I guess I was mistaken.

They used to claim that dropbox cannot access your files, but after
Chris Soghoian and others pointed out that this was not true, the FTC
sued them for false advertising.

http://www.wired.com/threatlevel/2011/05/dropbox-ftc/
http://en.wikipedia.org/wiki/Dropbox_%28service%29#Privacy_concerns

So you were only wrong in that you believed what a company falsely
claimed about the security of their proprietary product.  (Sounds like a
familiar story.)

-andy
-- 
Liberationtech is public  archives are searchable on Google. Violations of 
list guidelines will get you moderated: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, 
change to digest, or change password by emailing moderator at 
compa...@stanford.edu.


Re: [liberationtech] Is Dropbox opening uploaded documents?

2013-09-16 Thread Andy Isaacson
On Mon, Sep 16, 2013 at 02:47:48PM -0500, Jon Lebkowsky wrote:
 I followed your links, which said that someone filed a complaint with
 the FTC. Nothing about the FTC suing Dropbox. Got a link for that?

Indeed, seems I was mistaken about how far the issue went.  (And I don't
understand the intricacies of the FTC enforcement process, but that's
nothing new.)

As far as I can tell, Chris filed a complaint, Dropbox disputed it, and
nothing further came of the matter.

-andy
-- 
Liberationtech is public  archives are searchable on Google. Violations of 
list guidelines will get you moderated: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, 
change to digest, or change password by emailing moderator at 
compa...@stanford.edu.


Re: [liberationtech] Is Dropbox opening uploaded documents?

2013-09-14 Thread Bernard Tyers - ei8fdb

 On Fri, Sep 13, 2013 at 07:58:17AM +0200, Eugen Leitl wrote:
  Dropbox is pulling a Skype.
 
 no it's not, it's generating thumbnails. also this is advertising.

Hi,

I don't follow what you mean by advertising.

Thanks,
Bernard

--
Bernard / bluboxthief / ei8fdb

IO91XM / www.ei8fdb.org

-- 
Liberationtech is public  archives are searchable on Google. Violations of 
list guidelines will get you moderated: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, 
change to digest, or change password by emailing moderator at 
compa...@stanford.edu.

Re: [liberationtech] Is Dropbox opening uploaded documents?

2013-09-13 Thread Ryan Getz
On Thursday, September 12, 2013, Joe Szilagyi wrote:

 Found online:

 http://www.wncinfosec.com/**dropbox-opening-my-docs/http://www.wncinfosec.com/dropbox-opening-my-docs/

 --
 Joe Szilagyi



Interesting, thanks for sharing that.

Has anyone else tried to reproduce these results? I'm curious what others
have seen.

I tried this yesterday, only with the .doc file. I haven't been able to
reproduce those findings. I tested Dropbox (client and web), SugarSync
(client only), and Amazon Cloud Drive (web only). 20 hours later I
still don't have any buzzes.

Regards,
Ryan
-- 
Liberationtech is public  archives are searchable on Google. Violations of 
list guidelines will get you moderated: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, 
change to digest, or change password by emailing moderator at 
compa...@stanford.edu.

Re: [liberationtech] Is Dropbox opening uploaded documents?

2013-09-13 Thread Patrick Mylund Nielsen
On Fri, Sep 13, 2013 at 1:20 PM, Ryan Getz ry...@getzmail.com wrote:

 On Thursday, September 12, 2013, Joe Szilagyi wrote:

 Found online:

 http://www.wncinfosec.com/**dropbox-opening-my-docs/http://www.wncinfosec.com/dropbox-opening-my-docs/

 --
 Joe Szilagyi



 Interesting, thanks for sharing that.

 Has anyone else tried to reproduce these results? I'm curious what others
 have seen.

 I tried this yesterday, only with the .doc file. I haven't been able to
 reproduce those findings. I tested Dropbox (client and web), SugarSync
 (client only), and Amazon Cloud Drive (web only). 20 hours later I
 still don't have any buzzes.

 Regards,
 Ryan


Dropbox's response: https://news.ycombinator.com/item?id=6377712
-- 
Liberationtech is public  archives are searchable on Google. Violations of 
list guidelines will get you moderated: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, 
change to digest, or change password by emailing moderator at 
compa...@stanford.edu.