Live data from Hacker News

Dropbox on Mac now updates itself with a process in background

dropbox.com

21–30 of 93 posts

Re: Dropbox on Mac now updates itself with a process in background

#21
post #7

This doesn't seem any worse than Chrome continually updating itself.

Or Office, Creative Suite or dozens of other major applications.

Microsoft Office does not autoupdate. It notifies you of an update, but you have to confirm the transfer and installation. At least that's how it works on my Mac.

Re: Dropbox on Mac now updates itself with a process in background

#24
post #7

This doesn't seem any worse than Chrome continually updating itself.

In chrome you have the option to disable the auto update feature - an option that is noticeably missing here.

Chrome is a program that has standalone functionality where the program would still do useful work without updating.

The Dropbox sync service, on the other hand, is literally just the client half of Dropbox's own proprietary backend. If Dropbox makes an ABI-incompatible change to their sync protocol on the server side, the non-updated client will just break until you update.

Wanting to disable updates to such a service, would be like wanting to load the old version of a webapp SPA whenever you visit the site. What's the point? It's not going to (have been designed to) work that way.

Re: Dropbox on Mac now updates itself with a process in background

#25
post #16
post #7

This doesn't seem any worse than Chrome continually updating itself.

Both of them doing that in mandatory fashion is unacceptable. I might be OK with running this bit of their code on my computer, but it's not an open bar for dropping anything executable onto my machine at will.

[deleted]

Re: Dropbox on Mac now updates itself with a process in background

#26
Of course I see the possibility of harm here, but really, isn't automatic updates pretty standard by now? I mean, it's got to be better than letting a large swath of users run old versions of the software because they don't know how/don't care to update it. I mean, isn't that the more severe security issue at hand?

And if you're conscious enough about your digital security that you really do mind Dropbox updating itself automatically, why did you install their app in the first place? The only OS I actually expect to protect me from the apps I install is iOS, and only in combination with the AppStore review process.

From what I hear, Apple's attempts at creating similar safeguards in macOS with the Mac AppStore has not been received that well with developers because of the restrictions sandboxing place on the apps.

Re: Dropbox on Mac now updates itself with a process in background

#27

Earlier quoted context omitted.

I'd still prefer to be prompted to update. I know my phone is a security mess. But I want my desktop not to be.

That is funny to me because I assume my phone is much more secure (with strict sandboxing) compared to my desktop.

And, moreover, forcing automatic updates means my phone has far less vulnerable code sitting around on it than my desktop currently does.

Re: Dropbox on Mac now updates itself with a process in background

#28
post #24

Earlier quoted context omitted.

In chrome you have the option to disable the auto update feature - an option that is noticeably missing here.

Chrome is a program that has standalone functionality where the program would still do useful work without updating. The Dropbox sync service, on the other hand, is literally just the client half of Dropbox's own proprietary backend. If Dropbox makes an ABI-incompatible change to their sync protocol on the server side, the non-updated client will just break until you update. Wanting to disable updates to such a servi…

Auto-updates != No updates

Re: Dropbox on Mac now updates itself with a process in background

#29
post #20

I wonder how they did the auto-update that brought that feature to me... I have a pretty shitty internet connection here and i recognized the dropbox updater sucking up my bandwidth yesterday... I've not triggered any manual update...

Thought this too as soon as the notification popped up.

To the best of my knowledge I haven't updated recently, so they've basically had an auto-update feature sitting dormant for a while.

Nothing fishy here.

Post reply on HN