Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Dropbox exposes personal details of viewers of publicly shared Paper documents

twitter.com

Post reply on HN
Print view View original

91–100 of 112 posts

Re: Dropbox exposes personal details of viewers of publicly shared Paper documents

#91

Post by fock »

pathsjs wrote: post #60
plg wrote: post #22

Man alive, all I want is a folder that syncs. That's all. I understand that Dropbox is a business and blah blah blah ... so what are my alternatives if I literally only want: - a folder that syncs on my devices - the ability to share a folder with others - cross-platform

Seconded. I still cannot find a decent alternative, if I add - not self-hosted, but hosted by someone big enough to have a decent security team. I don't want to take care of the security of this myself, nor do I want to rely on some mostly unknown 3 people startup.

Hetzner sells hosted nextcloud. Not sure if the security team is absolutely top notch, but they are no 3 people startup neither.

Re: Dropbox exposes personal details of viewers of publicly shared Paper documents

#92

Post by danielhlockard »

jtbayly wrote: post #16
iicc wrote: post #12

Earlier quoted context omitted.

> It's 2019 and devs still can't get this st right. It's 2019 and humans still make typos.

Or it’s 2019 and Apple’s pro laptop keyboards still don’t work. ;)

especially on R, S, Space, and left-shift for me!

Re: Dropbox exposes personal details of viewers of publicly shared Paper documents

#93

Post by marcinzm »

dual_basis wrote: post #85
marcinzm wrote: post #15

Earlier quoted context omitted.

GDPR, as I understand, does not allow removing unrelated features if someone does not agree to have their privacy broken. For example, opting out of ad tracking cannot make the site be blocked for me. In this case, there is no opt out button other than not using the feature and the feature does not require this information sharing.

Essentially Dropbox is arguing that, due to the way they have implemented it, the feature does require this information sharing. While it clearly could be implemented many different ways, and I agree Dropbox should do better in this case, I think this is one of the difficulties in enforcing something like GDPR. Almost anything could be made to work in an anonymous way, so where do you draw the line? When signing up f…

>Essentially Dropbox is arguing that, due to the way they have implemented it, the feature does require this information sharing.

I'm honestly curious, which part of the feature requires every user to know every other user who has viewed the page?

Re: Dropbox exposes personal details of viewers of publicly shared Paper documents

#94

Post by shreyshrey »

jimbo366 wrote: post #43
jasonsync wrote: post #33

Earlier quoted context omitted.

https://www.Sync.com (full disclosure, I work there).

Does it support differential sync? It's the only reason why I'm still using Dropbox.

For majority of the users delta sync doesn’t bring much benefits . See here https://www.getfilecloud.com/blog/2017/03/myths-and-facts-ab...

Most of the modern files like office documents and pdfs are compressed. Delta Sync only will help in scenarios if you have bitmaps and vm disks.

Re: Dropbox exposes personal details of viewers of publicly shared Paper documents

#95

Post by windthrown »

climb_stealth wrote: post #86
plg wrote: post #22

Man alive, all I want is a folder that syncs. That's all. I understand that Dropbox is a business and blah blah blah ... so what are my alternatives if I literally only want: - a folder that syncs on my devices - the ability to share a folder with others - cross-platform

I'm very happy with Tresorit [0]. I used to use Spideroak but switched when their warrant canary got removed. The big plus for me is end to end encryption. I use it for documents and scans and never felt okay having those in Dropbox. I also have their cli client running on my Synology NAS so I get a local copy as well as in the cloud. The only downside, it is a fair bit more pricey when you need a lot of storage. [0]…

I agree, the only "con" I can think of with Tresorit is the price. But I am trying to put my money where my mouth is and pony-up for services which respect my privacy. Quite happy with Tresorit so far.

Re: Dropbox exposes personal details of viewers of publicly shared Paper documents

#96

Post by gog »

johnisgood wrote: post #89
marcinzm wrote: post #15

Earlier quoted context omitted.

GDPR, as I understand, does not allow removing unrelated features if someone does not agree to have their privacy broken. For example, opting out of ad tracking cannot make the site be blocked for me. In this case, there is no opt out button other than not using the feature and the feature does not require this information sharing.

> opting out of ad tracking cannot make the site be blocked for me. Does this apply to cookies? I am asking because lot of websites have "necessary" cookies and there is no way to opt out of them (other than by closing the tab), and if there is and you do, then you cannot proceed further. I really do not understand why some cookies would be necessary to view a page though, but I have seen this on A LOT of sites.

You do not need consent for necessary cookies.

Re: Dropbox exposes personal details of viewers of publicly shared Paper documents

#98

Post by johnisgood »

gog wrote: post #96
johnisgood wrote: post #89

Earlier quoted context omitted.

> opting out of ad tracking cannot make the site be blocked for me. Does this apply to cookies? I am asking because lot of websites have "necessary" cookies and there is no way to opt out of them (other than by closing the tab), and if there is and you do, then you cannot proceed further. I really do not understand why some cookies would be necessary to view a page though, but I have seen this on A LOT of sites.

You do not need consent for necessary cookies.

Then what is the reason for websites asking me to accept? Some websites also offer me the ability to select/deselect some cookies, but cannot deselect "necessary" cookies. There are websites that do not function until I accept. Some sites explicitly state this, and they do ask me to accept/consent.

Example: https://edigital.sk

On the right, you will see a down-arrow, click on that. You can clearly see the first checkbox on the left being checked and disabled, it is the "necessary" or "essential" cookies to what I am referring. You cannot deselect. On top of that, there is no way to close the popup (?), it is by design. Of course there are ways to circumvent it, but that is besides the point.

There are many other websites like this, but I cannot remember them. :/

Re: Dropbox exposes personal details of viewers of publicly shared Paper documents

#99

Post by LordDragonfang »

pathsjs wrote: post #58
jasonsync wrote: post #33

Earlier quoted context omitted.

https://www.Sync.com (full disclosure, I work there).

Unfortunately, it is only partially cross platform (no Linux client) :-(

Sync to a compatible VM or server and then set up rsync?

Re: Dropbox exposes personal details of viewers of publicly shared Paper documents

#100

Post by deiga »

peterkelly wrote: post #57

Not only that, but Dropbox lets you pick any publicly visible document that's been viewed by a large number of people and easily spam them simply by writing @doc. I may have just pissed off a lot of people with my experiment :( I realised immediately afterwards how reckless that was, but Dropbox - WTF? Why is this even allowed?

You did the right thing! This is seriously WTF! And I'm not entirely sure if this isn't even a breach of GDPR in the EU :scream:
Post reply on HN