Live data from Hacker News

Dropbox API v2 launches

blogs.dropbox.com

11–20 of 85 posts

Re: Dropbox API v2 launches

#11
Is the Dropbox client fully open source yet? I won't use a spying tool that hires international spies to be on the board if they continue to be closed-source and intent on spying. Their new SDKs seem to be open source - why not their main client product?

Re: Dropbox API v2 launches

#12
post #9

Why would they choose RPC style endpoints over REST?

Because REST is a superficial standard and people are starting to figure that out? APIs don't need to be complicated. Give me an endpoint to call and parameters to send. I don't need verbs, cool looking URLs, overloaded headers, special versioning schemes, and a never ending debate of what REST is and what it isn't. Also if anyone replies to this with 'you just don't understand REST' I'm going to put another nickel in the jar.

Re: Dropbox API v2 launches

#14
post #6
post #5

Earlier quoted context omitted.

It is interesting that you request the /get_account link with a POST method.

As systems grow you always end up wanting to parameterize GET apis with things that you can't reasonably continue to stuff into headers, matrix params, and a wonky URL (in my experience).

Which is why we need to get rid of the WebDAV baggage around the SEARCH method [0] and establish a general-purpose, safe/idempotent HTTP method that accepts a message body to supply parameters rather than using URL query strings; a draft RFC for such a method exists. [1]

[0] https://tools.ietf.org/html/rfc5323

[1] https://tools.ietf.org/html/draft-snell-search-method-00

Re: Dropbox API v2 launches

#15
post #6
post #5

Earlier quoted context omitted.

It is interesting that you request the /get_account link with a POST method.

As systems grow you always end up wanting to parameterize GET apis with things that you can't reasonably continue to stuff into headers, matrix params, and a wonky URL (in my experience).

GET requests can have a body. Some clients fail at handling this and you have to use method overrides, though.

Re: Dropbox API v2 launches

#16
post #11

Is the Dropbox client fully open source yet? I won't use a spying tool that hires international spies to be on the board if they continue to be closed-source and intent on spying. Their new SDKs seem to be open source - why not their main client product?

What are you worried about in the client app that would require it to be open source? Should they also open source their backend systems and give you access to them?

Re: Dropbox API v2 launches

#17
post #16
post #11

Is the Dropbox client fully open source yet? I won't use a spying tool that hires international spies to be on the board if they continue to be closed-source and intent on spying. Their new SDKs seem to be open source - why not their main client product?

What are you worried about in the client app that would require it to be open source? Should they also open source their backend systems and give you access to them?

It can read and see everything you do on your computer...

...until you close it for grinding too much cpu.

Re: Dropbox API v2 launches

#18
post #16
post #11

Is the Dropbox client fully open source yet? I won't use a spying tool that hires international spies to be on the board if they continue to be closed-source and intent on spying. Their new SDKs seem to be open source - why not their main client product?

What are you worried about in the client app that would require it to be open source? Should they also open source their backend systems and give you access to them?

Yes, they absolutely should open source their backend systems. Is the value of Dropbox really in their source code? I doubt it. They want my files, all of them, but they won't tell me what they're doing with the files or how their code works?

Everything about this should be open source, and I won't ever use it until it is. Also they should make a lot more effort towards promising privacy and security. As it stands right now, they seem intent on handing your file access to governments and building systems that are insecure by design. No thanks. Open source and then we'll talk.

Re: Dropbox API v2 launches

#19
post #16
post #11

Is the Dropbox client fully open source yet? I won't use a spying tool that hires international spies to be on the board if they continue to be closed-source and intent on spying. Their new SDKs seem to be open source - why not their main client product?

What are you worried about in the client app that would require it to be open source? Should they also open source their backend systems and give you access to them?

There was serious concern with some evidence a few years back that the Dropbox client was touching files in folders that weren't shared. Not sure if that is what OP's concern is. But I agree with your point, the client is only one small piece of the puzzle and won't reveal much.

Re: Dropbox API v2 launches

#20
post #18
post #16

Earlier quoted context omitted.

What are you worried about in the client app that would require it to be open source? Should they also open source their backend systems and give you access to them?

Yes, they absolutely should open source their backend systems. Is the value of Dropbox really in their source code? I doubt it. They want my files, all of them, but they won't tell me what they're doing with the files or how their code works? Everything about this should be open source, and I won't ever use it until it is. Also they should make a lot more effort towards promising privacy and security. As it stands ri…

You aren't obligated to be a customer of Dropbox. There are plenty of other services, either self-run or not, that caters to people that value baseless paranoia over functionality and usability.
Post reply on HN