or maybe you left an openbox installation on another computer and you don't remember, and whoever has that computer likes to snoop on your .doc files, specially the ones named "passwords"
Dropbox opening my docs?
111–120 of 136 posts
Re: Dropbox opening my docs?
#112Coincidentally (or not), I just received the invite to beta test Sync.com [1] today. Seems a Dropbox-clone, for the privacy conscious user. They claim that all files are encrypted, and they don't have access to the keys. The encryption algorithm is still private, but they say they'll open source it soon.
While I like the approach a lot more than Dropbox (that fights to obfuscate its own algorithm), I still don't feel safe. Anyone with access to the server could intercept your keys, and thus have access to your data.
TrueCrypt over some cloud-based solution is still the ideal option, but the lack of support for sparse images makes me hesitant.
EDIT: no affiliation with Sync.com (or Dropbox, for the matter). Just trying to find a decent cloud-based storage solution that fixes the exact problem exposed by the OP.
Re: Dropbox opening my docs?
#113https://crocodoc.com/customers/
Crocodoc is likely generating web previews of your documents.
Re: Dropbox opening my docs?
#114I would wager that they're opening it in order to generate a thumb or preview, or maybe for search indexing, and libreoffice is a good way to achieve this on linux - particularly if they're only opening it once, as they probably use the hash of the file. We do exactly this on our eCommerce platform, before wanging stuff into s3 or glacier and just keeping a reference kicking around. On the other hand, you have just d…
Parent: I would wager that they're opening it in order to generate a thumb or preview, or maybe for search indexing Article: Uploaded Documents to Dropbox Personal Account with Private Folders So drop box indexes and creates thumbnails for private documents ? This is because the NSA gives a bounty for friendly UIs, perhaps?
What's wrong with thumbnails for private documents? Thumbnails are thumbnails.
Re: Dropbox opening my docs?
#115LibreOffice has a pretty powerful document conversion, which you can run headless. I'm guessing they are converting to HTML and perhaps other formats -- do they offer anything like that? Edit: You can invoke it something like this: soffice --headless --convert_to html file.doc I'm just speculating, but it seems reasonable that it would open the document just like the regular LibreOffice, fetch external resources and…
That's pretty much exactly what is happening. DropBox converts documents into HTML for easy viewing on the web interface.
You seem pretty confident! Is your source you? A DropBox employee?
Re: Dropbox opening my docs?
#116really? you've already determined that it's running on an ec2 instance, but it's somehow "suspicious" that the user-agent is libreoffice? and you're a "security researcher" but "curious if this is an automated process"? please. sure, dropbox might owe an explanation (even though you certainly gave them permission to do this in their TOS), and you can call me cynical and jaded, but this seems like pretty shameless FUD…
It really does not matter if there is something more serious like a vulnerability in the question. And so what if the link was a covert advertisement, the community is still benefitted if a popular product is put under the scanner. It is a win-win.
Re: Dropbox opening my docs?
#117really? you've already determined that it's running on an ec2 instance, but it's somehow "suspicious" that the user-agent is libreoffice? and you're a "security researcher" but "curious if this is an automated process"? please. sure, dropbox might owe an explanation (even though you certainly gave them permission to do this in their TOS), and you can call me cynical and jaded, but this seems like pretty shameless FUD…
There's really no need to attack him.
i'm not attacking him as a person, i'm attacking his actions, specifically in this case his shamelessly disingenuous linkbait guerrilla marketing masquerading as a public service announcement
Re: Dropbox opening my docs?
#118really? you've already determined that it's running on an ec2 instance, but it's somehow "suspicious" that the user-agent is libreoffice? and you're a "security researcher" but "curious if this is an automated process"? please. sure, dropbox might owe an explanation (even though you certainly gave them permission to do this in their TOS), and you can call me cynical and jaded, but this seems like pretty shameless FUD…
It really does not matter if there is something more serious like a vulnerability in the question. And so what if the link was a covert advertisement, the community is still benefitted if a popular product is put under the scanner. It is a win-win.
except for the part where there is no actual vulnerability, it was actually a design decision[1], and the author of the article was raising ridiculous scaremongering questions that he knew the answers to in order to attract more attention.
Re: Dropbox opening my docs?
#119Earlier quoted context omitted.
again, it's not inconceivable that they understand this as well, and have some sort of rate limiting system in place. do you have a problem with google docs converting your office files?
There was a case awhile back where Google docs helped a guy rack up a huge AWS bill. http://www.behind-the-enemy-lines.com/2012/04/google-attack-...
Wow that is an interesting blog post, with a happy ending to boot (Amazon refunded the $1000+ in bandwidth fees, due to the accidental nature of the usage).
Re: Dropbox opening my docs?
#120Did you bother asking Dropbox what's going on? This kinda reads like an ad for HoneyDocs...
It does read like an ad for HoneyDocs, but this was actually the first time I've ever heard of it, and upon checking out their website it actually seems like an incredibly useful service. So if it is an ad, they appear to have succeeded.