Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Dropbox opening my docs?

wncinfosec.com

Post reply on HN
Print view View original

131–136 of 136 posts

Re: Dropbox opening my docs?

#131

Post by losethos »

Retard-nigger is fighting God.

God says...

Virtual-Notary.Org hereby notes that on Date: Friday September 13, 2013 16:32.43 EDT (UTC-0400)

a random drawing in the range [1, 100000], inclusive, based on a hardware source of true randomness, yielded the following decision.

  Random Value: 31817
-----

alive; or whether they be come out for war, take them alive.

20:19 So these young men of the princes of the provinces came out of the city, and the army which followed them.

20:20 And they slew every one his man: and the Syrians fled; and Israel pursued them: and Benhadad the king of Syria escaped on an horse with the horsemen.

20:21 And the king of Israel went out, and smote the horses and chariots, and slew the Syrians with a great slaughter.

20:22 And the prophet came to the king of Israel, and said unto him, Go, strengthen thyself, and mark, and see what thou doest: for at the return of the year the king of Syria will come up against thee.

20:23 And the servants of the king of Syria said unto him, Their gods are gods of the hills; therefore they were stronger than we; but let us fight against them in the plain, and surely we shall be stronger than they.

20:24 And do this thing, Take the kings away, every man out of his place, and put captains in their rooms: 20:25 And number thee an army, like the army that thou hast lost, horse for horse, and chariot for chariot: and we will fight against them in the plain, and surely we shall be stronger than they. And he hearkened unto their voice, and did so.

Re: Dropbox opening my docs?

#132

Post by B-Con »

biot wrote: post #128
B-Con wrote: post #126

Earlier quoted context omitted.

That's spam, not useful data. No one upvoted that hypothetical offering of data. People did find this article interesting. And hey, maybe I am interested in learning that language. Assuming your forum was appropriate (say, at a Galician convention), that could be a useful thing.

With apologies to Arthur C. Clarke: Sufficiently advanced spam is indistinguishable from useful content.

That's actually a good quote-analogy.

I'm not the most pragmatic person ever, but let me pose this: If you can't tell the difference, do you honestly care?

Re: Dropbox opening my docs?

#133

Post by biot »

B-Con wrote: post #132
biot wrote: post #128

Earlier quoted context omitted.

With apologies to Arthur C. Clarke: Sufficiently advanced spam is indistinguishable from useful content.

That's actually a good quote-analogy. I'm not the most pragmatic person ever, but let me pose this: If you can't tell the difference, do you honestly care?

If the utility is high enough, then I might not mind. The problem is when the content's utility is insufficiently advanced and it is followed by a plug for a very related product/service that solves the problem identified in the content. That scenario casts suspicion on the content: "Did the author write this only to plug the product/service?". In this instance, the Dropbox info was sufficiently useful (it appeared to be an original discovery) that I don't see it as a huge problem.

Re: Dropbox opening my docs?

#134

Post by Too »

snowwrestler wrote: post #52
tptacek wrote: post #23

Earlier quoted context omitted.

This seems unsafe; if I understand what this person has done, he'd essentially be coercing Dropbox's backend services to open arbitrary links on his behalf. That's a very dangerous capability to expose to adversaries.

I'm more concerned about the concept of a document that can issue a GET request just by being opened. It sounds exactly like a phishing payload.

Create a text file on your desktop, called hack.html, with the following content.
Double click to open with your favorite browser.

Re: Dropbox opening my docs?

#135

Post by B-Con »

biot wrote: post #133
B-Con wrote: post #132

Earlier quoted context omitted.

That's actually a good quote-analogy. I'm not the most pragmatic person ever, but let me pose this: If you can't tell the difference, do you honestly care?

If the utility is high enough, then I might not mind. The problem is when the content's utility is insufficiently advanced and it is followed by a plug for a very related product/service that solves the problem identified in the content. That scenario casts suspicion on the content: "Did the author write this only to plug the product/service?". In this instance, the Dropbox info was sufficiently useful (it appeared t…

That's an entirely reasonable position.

Re: Dropbox opening my docs?

#136

Post by CCs »

bigiain wrote: post #97
CCs wrote: post #92

Earlier quoted context omitted.

TrueCrypt would work too - it has block level encryption and Drobox syncs on block level too.

Hmmm, I wonder if TrueCrypt adequately secures a hidden volume's existence from an attacker (Dropbox) who can watch the patterns of your block level writes?

It's content encryption app, not Rubberhose File System or similar.
Post reply on HN