Live data from Hacker News

Dropbox exposes personal details of viewers of publicly shared Paper documents

twitter.com

101–110 of 112 posts

Re: Dropbox exposes personal details of viewers of publicly shared Paper documents

#101
post #58

Earlier quoted context omitted.

Unfortunately, it is only partially cross platform (no Linux client) :-(

Sync to a compatible VM or server and then set up rsync?

That could be doable, but requires setting up an always available server in my home and installing Windows on that - not exactly the best of ergonomics

Re: Dropbox exposes personal details of viewers of publicly shared Paper documents

#102
post #91
post #60

Earlier quoted context omitted.

Seconded. I still cannot find a decent alternative, if I add - not self-hosted, but hosted by someone big enough to have a decent security team. I don't want to take care of the security of this myself, nor do I want to rely on some mostly unknown 3 people startup.

Hetzner sells hosted nextcloud. Not sure if the security team is absolutely top notch, but they are no 3 people startup neither.

Thank you, I searched for Nextcloud hosting before, but I did not find Hetzner

Re: Dropbox exposes personal details of viewers of publicly shared Paper documents

#103
post #91

Earlier quoted context omitted.

Hetzner sells hosted nextcloud. Not sure if the security team is absolutely top notch, but they are no 3 people startup neither.

Thank you, I searched for Nextcloud hosting before, but I did not find Hetzner

the only downside I found was that they don't (or didn't) allow custom domains (so cloud.yourdomain.com won't work)

Re: Dropbox exposes personal details of viewers of publicly shared Paper documents

#104
post #66

Earlier quoted context omitted.

They're very clearly not aiming at being professional, with this trashing focus on random features.

What focus is missing? It works great, only missing feature as GP says is paid upgrade (first 250GB is free 'and always will be'). https://keybase.io/docs/kbfs

Introduction of random features instead of things people ask for.

Random features: - Crypto wallets that go on your public profile if you want the alert to shut up - Git. I mean, would you trust a production repo to magic crypto remote relying on a third party service that has no SLAs? - We're kind of Slack/Mattermost/Discord now but with none of the accessability or SLA offerings and you need one or the other to have an audience besides "tech nerds" who are already fragmented on 20+ platforms and clearly just needed one more

Things people want: - An app that is less entitled and forces focus over everything. Games, your presentation, everything, it doesn't care. - Dark mode? Literally the highest voted thing and it took them 2 years to start working on it. - Seamless mobile notifications. Signal can show content while maintaining strong crypto, why does Keybase just show ' sent you a message'. That is super annoying if you want to use Keybase for an actual team. - Random reliability issues and nobody seems to care about them with any sense of urgency.

It's okay to be run like a hobby, to move fast and break shit and pay no attention to polishing the experience. But then don't be surprised if nobody seriously uses your product.

Re: Dropbox exposes personal details of viewers of publicly shared Paper documents

#105
post #22

Man alive, all I want is a folder that syncs. That's all. I understand that Dropbox is a business and blah blah blah ... so what are my alternatives if I literally only want: - a folder that syncs on my devices - the ability to share a folder with others - cross-platform

I use Resilio Sync. It's not free, but was just a one time payment, not a subscription. Works on macOS, Linux, Windows, and they have an iOS app, too. Sharing with others is possible, but they have to have the app installed to access the files. Resilion Sync doesn't provide any server through which you can download the files, it's all P2P.

I second this for personal use For business I have no idea

Re: Dropbox exposes personal details of viewers of publicly shared Paper documents

#106
post #96

Earlier quoted context omitted.

You do not need consent for necessary cookies.

Then what is the reason for websites asking me to accept? Some websites also offer me the ability to select/deselect some cookies, but cannot deselect "necessary" cookies. There are websites that do not function until I accept. Some sites explicitly state this, and they do ask me to accept/consent. Example: https://edigital.sk On the right, you will see a down-arrow, click on that. You can clearly see the first check…

I am not seeing anything on your example. But necessary cookies are things without the site can not function (like logging in).

I suppose most of the time the box is there to allow you to consent to additional cookies as well.

There are also a lot of broken implementations out there.

Re: Dropbox exposes personal details of viewers of publicly shared Paper documents

#107
post #106

Earlier quoted context omitted.

Then what is the reason for websites asking me to accept? Some websites also offer me the ability to select/deselect some cookies, but cannot deselect "necessary" cookies. There are websites that do not function until I accept. Some sites explicitly state this, and they do ask me to accept/consent. Example: https://edigital.sk On the right, you will see a down-arrow, click on that. You can clearly see the first check…

I am not seeing anything on your example. But necessary cookies are things without the site can not function (like logging in). I suppose most of the time the box is there to allow you to consent to additional cookies as well. There are also a lot of broken implementations out there.

[deleted]

Re: Dropbox exposes personal details of viewers of publicly shared Paper documents

#108
post #49

And does anyone actually use Dropbox paper? I'd rather have a Dropbox email service and client than this silly product

I do, because they are one of the few online collaboration platforms which support LaTeX. I'm not talking about Overleaf, which is great if you want to make a full LaTeX document, I'm talking about an easier markdown editor where LaTeX is only used for math equations. I don't need the full turing-completeness of LaTeX if I'm just taking some notes during a meeting, but I do want to be able to write math formulae and…

You should look into Notion.so. They don’t have inline TeX (yet?) but they do have block TeX.

Re: Dropbox exposes personal details of viewers of publicly shared Paper documents

#109

Earlier quoted context omitted.

Essentially Dropbox is arguing that, due to the way they have implemented it, the feature does require this information sharing. While it clearly could be implemented many different ways, and I agree Dropbox should do better in this case, I think this is one of the difficulties in enforcing something like GDPR. Almost anything could be made to work in an anonymous way, so where do you draw the line? When signing up f…

>Essentially Dropbox is arguing that, due to the way they have implemented it, the feature does require this information sharing. I'm honestly curious, which part of the feature requires every user to know every other user who has viewed the page?

My point was that no, of course the feature doesn't require it, but their particular implementation of the feature does. For example, maybe they implemented per-user sharing first, which obviously would need to know who is accessing the document. Then they realized there are some use cases for sharing the document publically, but they basically just treated this (internally, i.e. according to their implementation) as a wildcard in the authentication portion. That is to say, the public sharing works exactly the same as the per-user sharing, but with a * in the "allowed users" field.

Clearly it doesn't have to and should not be this way. My point was that:

1. They are saying that their particular implementation did require it to be this way. 2. Almost every web app could be made to require less private data from the user, however if this is something that GDPR is going to enforce then there will end up being some subjective analysis (according to non-tech lawyers?) as to whether a particular implementation was in violation.

Re: Dropbox exposes personal details of viewers of publicly shared Paper documents

#110

Earlier quoted context omitted.

I do, because they are one of the few online collaboration platforms which support LaTeX. I'm not talking about Overleaf, which is great if you want to make a full LaTeX document, I'm talking about an easier markdown editor where LaTeX is only used for math equations. I don't need the full turing-completeness of LaTeX if I'm just taking some notes during a meeting, but I do want to be able to write math formulae and…

You should look into Notion.so. They don’t have inline TeX (yet?) but they do have block TeX.

Thanks, Notion looks pretty great. Beats Dropbox Paper on almost all fronts except the inline TeX.

It looks like it is on their radar: https://twitter.com/NotionHQ/status/1093334827770699778

In the meantime, there is this workaround: https://www.notion.so/Notion-Inline-Math-9c5047a4e7c84643848...

It's not a great workaround, however, since (by the way it works) it looks like it would only work locally on the user's browser assuming they install the violentmonkey browser extension, it is rather verbose (the code block + `math:` prefix), and having to press F2 to rerender all inline math.

Post reply on HN