Live data from Hacker News

Tell HN: Dropbox now requires access to contacts for Google login

news.ycombinator.com

61–70 of 393 posts

Re: Tell HN: Dropbox now requires access to contacts for Google login

#61
post #43

I really wish mobile OSes would allow you to grant apps permissions but serve fake data, (that's important!) without giving the app the ability to tell the difference. Just so it appears to the app that you've given the permission, when you in fact have not. This would solve this entire class of problems and then some. So, for example: - App "has" access to contacts, but the system returns that you have none. - App "…

iOS has started doing this, at least for photos.

Re: Tell HN: Dropbox now requires access to contacts for Google login

#62
post #41

Earlier quoted context omitted.

I'm currently using onedrive for business (5$/month for 1tb, exchange and some other office goodies). I can highly recommend it, the privacy probably is not perfect with it being a Microsoft product after all. But the apps are superb and Android/iOS photo upload are a big plus.

I am repeating myself from another thread but I'm 90% sure of the answer and no-one checks: are you sure OneDrive works well? Can you sync PST files? [1] [1] https://www.eejournal.com/article/onedrive-down-the-road-to-...

Since I currently do not own a Windows PC, I could only test using the web interface, Android and iOS app. All of them seem to work fine (~10MB .pst file), at least upload and download works and the hashsums match afterwards.

If you want to test this yourself, Onedrive has a free tier you could try.

Re: Tell HN: Dropbox now requires access to contacts for Google login

#63
post #43

I really wish mobile OSes would allow you to grant apps permissions but serve fake data, (that's important!) without giving the app the ability to tell the difference. Just so it appears to the app that you've given the permission, when you in fact have not. This would solve this entire class of problems and then some. So, for example: - App "has" access to contacts, but the system returns that you have none. - App "…

While for contacts and location that would be a good feature (I agree!), I'm not so sure about storage. It may be nice for certain rogue apps (or ones that request permissions they don't actually need) to give them /dev/null without them knowing, but that may actually result in bugs and unstable behaviour if apps are written to expect working storage. Storage doesn't have a built-in failure mode like contacts and loc…

Okay, you're probably right. It might be a better option to give an app a sandboxed storage location instead, just so the files it put there remain there because it might expect to find them there later.

Re: Tell HN: Dropbox now requires access to contacts for Google login

#65
post #13

DropBox seems to have decided that the only way for them to grow is to turn their data sync platform into a collaborative platform. Makes a whole lot of sense to steal contacts from all your users. FYI - never use oauth to log into anything you care about.

Is there an oauth provider that offers what mobiles have started to do with permissions, where "deny" just gives empty data to to the requesting application instead of actually rejecting the claim? It'd be nice to see Google offer something like that.

Facebook does this with theirs for access to a user’s Pages. Just an empty array, which isn’t unusual for normal users.

Makes it tough for third-party devs to debug a legit “I am not seeing Page X as an option” though.

Re: Tell HN: Dropbox now requires access to contacts for Google login

#66
post #47

People are still using dropbox in the age of one-click nextclouds in aws, freenas, digitalocean, etc? Interesting.

You know, this could easily be taken in a condescending way.

I choose to use instead of rolling my own because I don't want to deal with the hassle.

And before you say "but it's a one-click install! what hassle?" I'll answer you: the hassle is not in launching it, the hassle is in keeping it online and operating well at all times.

People always forget about maintenance when they spout these things...

Re: Tell HN: Dropbox now requires access to contacts for Google login

#67
post #43

I really wish mobile OSes would allow you to grant apps permissions but serve fake data, (that's important!) without giving the app the ability to tell the difference. Just so it appears to the app that you've given the permission, when you in fact have not. This would solve this entire class of problems and then some. So, for example: - App "has" access to contacts, but the system returns that you have none. - App "…

App developers find out about this practice as it gets more commonplace. They add a check for 'empty' data or resolution failures. If these checks notice that you had been providing null or fake data, the app now gives you an intrusive yet pleading popup to please lift the privacy measures.

You get annoyed, resenting the fact that your friends are using this piece of garbage. Reluctantly you lift the measures, forget about it, and just keep using the app.

Re: Tell HN: Dropbox now requires access to contacts for Google login

#68
post #47

People are still using dropbox in the age of one-click nextclouds in aws, freenas, digitalocean, etc? Interesting.

Dropbox is dramatically cheaper per GB than the other cloud storage services, and it doesn't charge bandwidth fees.

Re: Tell HN: Dropbox now requires access to contacts for Google login

#69

Earlier quoted context omitted.

> they just couldn't grok the reason It's hard to make someone understand something when their salary (and entire reputation - given that increasing engagement/retention by X% is a big selling point on a resume) depends on not understanding it.

Yes, but usually in that situation, the misunderstanding is intentional. This seemed a genuine inability to understand why I would quit over "a simple upsell". I am sure the inability to understand that it was a dark pattern to have no [X] or [SKIP] button was intentional :-)

Well that was simply arrogance that can be see in almost every large organizations: they believe everyone would like their idea. The problem maybe most people do like their idea but there would be always someone does not.

Re: Tell HN: Dropbox now requires access to contacts for Google login

#70
post #41

Earlier quoted context omitted.

I'm currently using onedrive for business (5$/month for 1tb, exchange and some other office goodies). I can highly recommend it, the privacy probably is not perfect with it being a Microsoft product after all. But the apps are superb and Android/iOS photo upload are a big plus.

I am repeating myself from another thread but I'm 90% sure of the answer and no-one checks: are you sure OneDrive works well? Can you sync PST files? [1] [1] https://www.eejournal.com/article/onedrive-down-the-road-to-...

For the most part you should only be using .pst files for archiving, and those you should be able to sync in Outlook now.

For Exchange/Exchange Online, Outlook uses a .ost file that lives in AppData, which is not synced by OneDrive.

Post reply on HN