291–300 of 435 posts
Earlier quoted context omitted.
Dropbox on Linux needs none of that. Sure it doesn't have the fancy icons in file managers, but it also runs in user-space without a kernel module.
There are plugins that give you the fancy icons for some file managers, and they still run in user-space (and as non-root).
Finder doesn't have plugins, hence the accessibility API shenanigans necessary to get the same effect.
Earlier quoted context omitted.
What exactly is so dangerous? Any app can take screenshots , listen to keyboard entries, send keys, move the mouse pointer and upload stuff to a server without any AXApi permission. Forbidding window movement doesn't add any security at all. Anyways, all I want a simple prompt explaining what the Accessibility API does and yes/no buttons.
One example that comes to my mind, is that you won't be able to copy any data from keychain. In fact, no one can access protected keychain data, if any app that is not in Accessibility "listens to keyboard". http://apple.stackexchange.com/questions/212622/keychain-won...
Earlier quoted context omitted.
What exactly is so dangerous? Any app can take screenshots , listen to keyboard entries, send keys, move the mouse pointer and upload stuff to a server without any AXApi permission. Forbidding window movement doesn't add any security at all. Anyways, all I want a simple prompt explaining what the Accessibility API does and yes/no buttons.
One example that comes to my mind, is that you won't be able to copy any data from keychain. In fact, no one can access protected keychain data, if any app that is not in Accessibility "listens to keyboard". http://apple.stackexchange.com/questions/212622/keychain-won...
Earlier quoted context omitted.
Their client just works better at syncing quickly and reliably. A huge criteria for me is how much CPU it uses in the background compared to competing solutions from Google or MS and it was often an order of magnitude less (other clients may have improved in the last year or two, I haven't checked). Another significant advantage is that they support a stable command line client for Linux.
This. I cannot stress how important both of these factors are. I still haven't found a solution other than ( http://meocloud.pt , which was implemented by my former colleagues) that was within an order of magnitude as fast and/or as light in terms of CPU load, _and_ that supported Linux directly (let alone had halfway decent MacOS support).
Earlier quoted context omitted.
That was actually designed to avoid typing credentials into "faked" password dialogs. The above mentioned "Secure Desktop" with dimming is not designed for that, but for the, rather hilarious, fact that it is trivial for a Windows program to hit any button on the screen it wants to. Having the permission requests pop up on a "Secure Desktop" prevents a malicious program from hitting the "Allow" button for it's own pe…
Dropbox isn't hacking anything. They show the legit OS dialog requesting permission, and the user complies blindly.
Earlier quoted context omitted.
Got a good alt suggestion?
I use Syncthing: https://syncthing.net/ Totally distributed, works like magic. Being distributed means you do have to blindly trust a third party, but also that don't have to worry about $ per megabite. For example, one of the machines I have in my Syncthing network is a Raspberry Pi with a 3TB drive getting a backup of my laptop $HOME and important stuff from other machines all the time.
I love Syncthing, though, but I had to take the Pi out of the pool.
I just removed Dropbox. Web client from here on.
Earlier quoted context omitted.
1. Dropbox asks for root 2. Dropbox does not use sandboxing (at least, the one I have doesn't) So, they do.
There is a difference between having all my files and being able to access all my files via a client. 1) My files are not on their service and thus not available at their discretion; they would first have to be uploaded. 2) With that logic all applications "have" all my files, but you bet I'd find it weird if I caught Libreoffice uploading files of interest to a service of theirs. That said, I do see your point. Most…
On macOS this is not true though, for well-behaved document-based apps! Sandboxing prevents access to anything you haven't explicitly granted access to. I don't know if Libreoffice implements it correctly, though.
I have given Dropbox access to my files, admins rights, and ability to run in the kernel. I'm not freaking out about the Accessibility API. setuid binaries: $ tree -p /Library/DropboxHelperTools/ /Library/DropboxHelperTools/ ├── [-r-s--x--x] DropboxHelperInstaller └── [drwxr-xr-x] Dropbox_u501 ├── [-r-s--x--x] dbaccessperm ├── [-r-s--x--x] dbfseventsd └── [-r-s--x--x] dbkextd kernel extension: $ kextstat -b com.getdr…
Since the arrival of FSEvents I don't understand why DB needs a kernel mod at all
Earlier quoted context omitted.
Disable the minimize button? Hook into alt tab? There's endless opportunities!
I mean sure and that may confuse the normal users. But if I remember correctly you can't override / replicate everything without administrative access. If I remember correctly ctrl + alt + del can't be overridden on the security screen. I thought there were other things as well.