Live data from Hacker News

Dropbox exposes personal details of viewers of publicly shared Paper documents

twitter.com

11–20 of 112 posts

Re: Dropbox exposes personal details of viewers of publicly shared Paper documents

#13

DropBox doubled down. https://twitter.com/DropboxSupport/status/117695661143435264... https://twitter.com/DropboxSupport/status/117695664129355777... https://twitter.com/DropboxSupport/status/117695667110665830... (And they have no idea how twitter threads work)

To save folks a few clicks and in case those tweets are deleted, here's the content:

> We understand the concerns, and want to assure you that privacy considerations are built into how we design our features. While Paper has a setting that allows anyone with the link to access a Paper doc, we warn users who try to access a doc owned by another team or a...[1/3]

> ...user not on their team that their information will be visible in a screen that pops up before the Paper doc loads. Displaying this information is needed to enable collaboration and security features for our users. Users and admins can control who can view a Paper doc..[2/3]

> ...in our settings. For more information see: https://help.dropbox.com/files-folders/paper/sharing-permiss... [3/3]

Re: Dropbox exposes personal details of viewers of publicly shared Paper documents

#14
post #3

This looks like a GDPR breach. Does anyone know where i can find the details for the dropbox GDPR representative?

Why is it a GDPR breach when a Dropbox screen clearly explains to the user clicking the link that other users will see your details if you proceed? (Just curious, it may well be an issue, I just don’t know how).

I’m not expert in the matter but I’m sure just explaining some bad behavior does not make it legal if it were illegal.

Re: Dropbox exposes personal details of viewers of publicly shared Paper documents

#15
post #3

This looks like a GDPR breach. Does anyone know where i can find the details for the dropbox GDPR representative?

Why is it a GDPR breach when a Dropbox screen clearly explains to the user clicking the link that other users will see your details if you proceed? (Just curious, it may well be an issue, I just don’t know how).

GDPR, as I understand, does not allow removing unrelated features if someone does not agree to have their privacy broken. For example, opting out of ad tracking cannot make the site be blocked for me. In this case, there is no opt out button other than not using the feature and the feature does not require this information sharing.

Re: Dropbox exposes personal details of viewers of publicly shared Paper documents

#16
post #12
post #9

It's 2019 and devs still can't get this s t right.

> It's 2019 and devs still can't get this st right. It's 2019 and humans still make typos.

Or it’s 2019 and Apple’s pro laptop keyboards still don’t work. ;)

Re: Dropbox exposes personal details of viewers of publicly shared Paper documents

#17

DropBox doubled down. https://twitter.com/DropboxSupport/status/117695661143435264... https://twitter.com/DropboxSupport/status/117695664129355777... https://twitter.com/DropboxSupport/status/117695667110665830... (And they have no idea how twitter threads work)

The threads are not working because DropboxSupport fumbled them in their answer

You (I mean, the support account) need to make the following items a reply of the 1st item then it will work

Re: Dropbox exposes personal details of viewers of publicly shared Paper documents

#18
post #3

This looks like a GDPR breach. Does anyone know where i can find the details for the dropbox GDPR representative?

Why is it a GDPR breach when a Dropbox screen clearly explains to the user clicking the link that other users will see your details if you proceed? (Just curious, it may well be an issue, I just don’t know how).

If I understand correctly this warning/explanation only appears for the user sharing the document, not for anyone else who opened it(and whose information is still embedded).

Re: Dropbox exposes personal details of viewers of publicly shared Paper documents

#20

I had a chance to join a machine learning team at Dropbox a few years ago. Ultimately what made me decline was this feeling that everyone in the office was sort of a zombie on autopilot. Nobody was excited about anything, all the use cases being kicked around for machine learning were extremely contrived recommendation and automation features that seemed like they had no real product research or stakeholder support t…

Dropbox to me seems like a one-trick pony trying desperately to expand their market. It's a cloud storage system. Ideally for consumers, not enterprises (who already have Google Drive, or AWS if you're storing web objects). I know they acquired HelloSign awhile back, but who the heck would want to use both DropBox and HelloSign together?
Post reply on HN