Live data from Hacker News

Dropbox Introduces 2-Factor Authentication

dropbox.com

21–30 of 78 posts

Re: Dropbox Introduces 2-Factor Authentication

#21
post #12

Two-Factor authentication sucks. It's too hard for users. Most people will never us it. Dropbox should consider using Rublon (yes, that's my startup): https://rublon.com 7 reasons why you should add Rublon to your website: http://blog.rublon.com/2012/why-add-rublon/

[deleted]

Re: Dropbox Introduces 2-Factor Authentication

#22
post #19

Great, now only if they actually encrypted my files.

Put a truecrypt volume in your DropBox. Why rely on someone else to do the encryption?

The downside, of course, is no differential sync'ing. So, if you make a change to your volume, you must re-upload the entire volume.

Worth doing for some files, yes, but still a pain. Per-file encryption would be ideal, but a monstrous pain to implement with TrueCrypt.

Dropbox is probably not crazy about widespread encryption because it would eliminate their ability to perform deduplication. Perhaps they could get around this if you had a special encrypted quota. For example, you have 5GB of space and 100MB of encrypted space.

Re: Dropbox Introduces 2-Factor Authentication

#24
post #19

Great, now only if they actually encrypted my files.

Put a truecrypt volume in your DropBox. Why rely on someone else to do the encryption?

Kinda defeats the purpose of DropBox. If you're going to use volume encryption, might as well use Tarsnap or something else to just backup the one large file.

Re: Dropbox Introduces 2-Factor Authentication

#25
post #20
post #19

Earlier quoted context omitted.

Put a truecrypt volume in your DropBox. Why rely on someone else to do the encryption?

If Dropbox were designed to handle sequentially-numbered blobs of encrypted data, changing one file would require your other devices to download only that file (an encrypted blob of roughly the same size). With a TrueCrypt volume or other encrypted file solution on top of Dropbox, you have to resync the entire multi-GB volume any time a single file in there changes, since to Dropbox it's just one big file. (Another o…

If Dropbox were designed to handle sequentially-numbered blobs of encrypted data, changing one file would require your other devices to download only that file (an encrypted blob of roughly the same size).

But they do: store files and name them sequentially ;)

I think Encfs is the best solution, since it encrypts each file separately. Just mount the encrypted end over the Dropbox directory and the plaintext end somewhere else, and use it transparently.

Re: Dropbox Introduces 2-Factor Authentication

#27

I upgraded my account, and now the desktop client is not letting me login, saying I need the latest client. I downloaded that and it still gives me the same error..

You'll need their "experimental build": https://forums.dropbox.com/topic.php?id=66910

Re: Dropbox Introduces 2-Factor Authentication

#28
post #12

Two-Factor authentication sucks. It's too hard for users. Most people will never us it. Dropbox should consider using Rublon (yes, that's my startup): https://rublon.com 7 reasons why you should add Rublon to your website: http://blog.rublon.com/2012/why-add-rublon/

how is the phone not a second factor?

Re: Dropbox Introduces 2-Factor Authentication

#29
post #28
post #12

Two-Factor authentication sucks. It's too hard for users. Most people will never us it. Dropbox should consider using Rublon (yes, that's my startup): https://rublon.com 7 reasons why you should add Rublon to your website: http://blog.rublon.com/2012/why-add-rublon/

how is the phone not a second factor?

Rublon replaces passwords with cryptographic keys that are partially stored on your phone. This is a completely new approach to user authentication.

Re: Dropbox Introduces 2-Factor Authentication

#30
post #19

Earlier quoted context omitted.

Put a truecrypt volume in your DropBox. Why rely on someone else to do the encryption?

The downside, of course, is no differential sync'ing. So, if you make a change to your volume, you must re-upload the entire volume. Worth doing for some files, yes, but still a pain. Per-file encryption would be ideal, but a monstrous pain to implement with TrueCrypt. Dropbox is probably not crazy about widespread encryption because it would eliminate their ability to perform deduplication. Perhaps they could get ar…

[deleted]
Post reply on HN