Live data from Hacker News

Google Drive Desktop – A cross-platform Google Drive desktop app made w Electron

github.com

81–90 of 97 posts

Re: Google Drive Desktop – A cross-platform Google Drive desktop app made w Electron

#81
post #39

This not being an official release from Google, using this is potentially worse than giving someone your Google password without fully vetting it. There are some existing safeguards in place to make a password alone difficult to use, but the app itself would have signed in access to your account and the contents of files. You may think it's simple to watch the app for bad behavior and decide it's safe, but you wouldn…

Google does actively prevent "embedded browser" apps - especially shady ones - from stealing Google passwords or other credentials https://security.googleblog.com/2019/04/better-protection-ag... Electron is known to be affected: https://github.com/electron/electron/issues/22346#issuecomme... The author of Google Drive Desktop seems to be aware but I do not think anyone can win this race against Google: https://github…

That only applies to the password, but the password wasn't really the concern. If you're signed in (no matter how you signed in), a modified browser has the same access to your account that you do with creative possibilities for abusing that. You can argue that if an app isn't trusted then there are other concerns with running it on your machine and that is true too, but some apps want to avoid being too suspect in order to maintain their installation as long as possible. Extra scrutiny in any scenario like this is good. :)

Re: Google Drive Desktop – A cross-platform Google Drive desktop app made w Electron

#82
post #64
post #55

Earlier quoted context omitted.

It wouldn't matter how you signed in for potential abuse to occur if the app itself is untrusted, unfortunately. The repository doesn't include all of the code that gets included in the app, because it has dependencies. It links those dependencies on the github page, but you have to verify that the dependencies being linked to are the ones the build actually uses. Then check that you like what's in those dependencies…

> It wouldn't matter how you signed in for potential abuse to occur if the app itself is untrusted, unfortunately. > The repository doesn't include all of the code that gets included in the app, because it has dependencies.* > Software is guilty until proven innocent I'm not saying you're wrong about any of this, and I don't trust this app myself (mostly because JS dependencies are hard to trust for various reasons),…

> but we (meaning computer users) spent decades downloading sketchy executables for our Windows PCs.

This is sadly not a valid comparison. Our PCa have a far more critical role in our lives now, have far more power to hurt us, and are reachable by 1000x more malicious actors.

We are in a new, dangerous world. We need much better OSes with much stronger sandboxing for our modern world.

Re: Google Drive Desktop – A cross-platform Google Drive desktop app made w Electron

#83
post #60

Earlier quoted context omitted.

Well, to be more specific -- I want the OS itself to be a full-screen tab container with multiple spaces/desktops (and add tiling, and popping out tabs like floating windows, as advanced usage). And then each tab is an app or app document window. So I could have a Chrome tab next to a Firefox tab if I wanted. Browser tabs would be peers next to other apps. None of this is about security, or running apps in the browse…

Sounds like Ubuntu's Unity to me. My 2 cents: Now that I'm using two 4K panels I very much enjoy having 4 windows side-by-side (optionally even splitting those vertical "columns" horizontally to hold 2 windows). No more task switching, all I need is always visible - I personally wouldn't opt for a tab-based full-screen WM.

What about the other 40 windows?

Using two large monitors is bad for your neck.

Re: Google Drive Desktop – A cross-platform Google Drive desktop app made w Electron

#84
post #13

As a fan of the Google Play desktop app, these Electron wrappers around Google apps are really flaky and hard to maintain. Google is motivated to break these implementations since they live outside of their direct web ecosystem, and when they break it always takes some time to recover since it's open-source. So you end up still using the browser solution. What's additionally weird is that you can pull your tabs apart…

Things breaking is the natural order of the world. No one needs an incentive to break anything, merely a lack of incentive to fix will suffice

Re: Google Drive Desktop – A cross-platform Google Drive desktop app made w Electron

#85
post #4

This is handy. Another alternative on Windows is to create a separate chrome profile and then create a desktop shortcut to that profile. Set the default page to be your drive in that profile Here's an example shortcut "C:\Program Files\Google\Chrome\Application\chrome.exe" --profile-directory="Profile 2" Use that profile as your Drive app

When you create a new profile you're asked to put a shortcut in your desktop, you don't need to create it by hand.

Hmm, my machine doesn't.

Re: Google Drive Desktop – A cross-platform Google Drive desktop app made w Electron

#86
post #16

What is the deal with Google's syncing apps? "Backup and Sync" still misses features like Files On-Demand/Smart Sync available in OneDrive/Dropbox and deleting files online pollutes the local trash/recycle bin on macOS/Window computers. "Drive File Stream" actually has these lazily loaded file placeholders, but it is treated like an additionally mounted volume instead of a local folder somewhere on my local disks. It…

Is there even an officially supported Linux client from Google?

Re: Google Drive Desktop – A cross-platform Google Drive desktop app made w Electron

#87
post #29

Respectfully... what is the point of this? Performance will be similar to using Google Docs on Chrome. Memory usage will be probably worse since you are running another engine besides your browser. Is it just for the convenience of not having to type the URL on your browser?

I'm guessing it's for people that want the Google products to be their main desktop office suite. Haven't looked into it, but maybe it can open .docx files etc. directly as the default app for it?

It still remains a shim over the stock Google Apps then, right?

Re: Google Drive Desktop – A cross-platform Google Drive desktop app made w Electron

#89
post #64
post #55

Earlier quoted context omitted.

It wouldn't matter how you signed in for potential abuse to occur if the app itself is untrusted, unfortunately. The repository doesn't include all of the code that gets included in the app, because it has dependencies. It links those dependencies on the github page, but you have to verify that the dependencies being linked to are the ones the build actually uses. Then check that you like what's in those dependencies…

> It wouldn't matter how you signed in for potential abuse to occur if the app itself is untrusted, unfortunately. > The repository doesn't include all of the code that gets included in the app, because it has dependencies.* > Software is guilty until proven innocent I'm not saying you're wrong about any of this, and I don't trust this app myself (mostly because JS dependencies are hard to trust for various reasons),…

Same way we draw the lines between risk and reward in everyday life while still managing to function. Doing that with software can be a little less intuitive than stubbing your toe and learning from the pain, but it ends up not being that hard to maintain a low resolution threat model when you prioritize well.

A user with a basic habit wouldn't need to know how to read the code for this, because there are enough signals that you wouldn't need to get that far to decide not to use it.

Re: Google Drive Desktop – A cross-platform Google Drive desktop app made w Electron

#90
post #16

What is the deal with Google's syncing apps? "Backup and Sync" still misses features like Files On-Demand/Smart Sync available in OneDrive/Dropbox and deleting files online pollutes the local trash/recycle bin on macOS/Window computers. "Drive File Stream" actually has these lazily loaded file placeholders, but it is treated like an additionally mounted volume instead of a local folder somewhere on my local disks. It…

I switched to Google Drive a while back because I really wanted better photo storage and Dropbox killed that off a while back, plus the Google One account is pretty nice. But I had no idea that Google would be so horrible at syncing files. It's really amazing how poor it is compared to Dropbox.

I did the same, and then it really just wasn't a great tool. And backing out of a fully populated Google Drive was a complex process.
Post reply on HN