Live data from Hacker News

Dropbox Owns Cloud Storage on Mobile

cloudrail.com

71–80 of 82 posts

Re: Dropbox Owns Cloud Storage on Mobile

#71
post #7
post #4

Earlier quoted context omitted.

Yea, but lets say we just pick iOS users, how do you tell they use iCloud over Dropbox when some things do not give a choice? This is probably as good as we're gonna get from a third-party.

I guess every iOS user uses iCloud somehow. But for me it's just backup because it is so limited to the Apple world. Do they even have a public API?

[deleted]

Re: Dropbox Owns Cloud Storage on Mobile

#72

Earlier quoted context omitted.

Dropbox works. Put aside all the concerns over War Crimes or Spying, or Security, Dropbox simply works. Every mobile platform is supported. Every desktop platform is supported. Sharing, Teams, direct links, all the core features are there. Anyone can safely recommend and share Dropbox files with their Grandma (with a PC still running XP), or their Mac loving parents, or their weird hipster friend running Gentoo GNU/L…

Agreed, it's just got to work. We're working on an alternative: https://www.sync.com/your-privacy/

I understand what you mean by "zero knowledge", but it bothers me when companies say things like "we can't access your data because it's encrypted client-side".

If the service provider controls the code in the client (as you do), the fact is the service provider definitely can access the data, you're just choosing not to.

I don't think there is much difference between encrypting client-side when you control the client, and encrypting server-side before storage. Either way you have encryption-at-rest.

Re: Dropbox Owns Cloud Storage on Mobile

#73
post #13

Earlier quoted context omitted.

> I don't know why people put up with it? Lock-in? Once you have a few gigs up on Dropbox, it's a bit of a challenge transferring it elsewhere.

I disagree. As a long time paying Dropbox customer, I reevaluate each year, including copying all my data over to a competing provider to see how it shakes out. For all the big providers it's drag and drop. So far what keeps me coming back to Dropbox is that the other solutions have sync reliability issues on one or more of the platforms I use (we're a diverse family, with everything from a Linux server to OSX to Win…

Have you tried Seafile? (https://seafile.de/)

That has been the only cloud storage provider good enough (but not as good as) Dropbox to wean me away from DB. I've been using it for a couple of months now.

Re: Dropbox Owns Cloud Storage on Mobile

#74
post #25

Earlier quoted context omitted.

Dropbox is currently indispensable for iOS users. Most iOS people I know use Dropbox as the clunky-but-works app-to-app sharing mechanism. Dropbox is not as popular on Android because apps can integrate more naturally. iCloud may be easier and is the probable successor, but Apple has only recently gotten its cloud game together and its free option is only 5GB. Eventually the platforms are going to make using a third…

I'm confused by your comment... I'm a recent convert to iOS from Windows Phone, and I've just kept on using OneDrive for my documents. I'm not even sure what "app-to-app sharing" means. Dropbox definitely isn't indispensable to me.

For example, creating a file in one app, editing it in another app, sending it to a third app to upload somewhere else.

That's hard to do without a filesystem or proper Intents.

iOS has neither, so people use Dropbox as filesystem.

Re: Dropbox Owns Cloud Storage on Mobile

#75

Earlier quoted context omitted.

Agreed, it's just got to work. We're working on an alternative: https://www.sync.com/your-privacy/

I understand what you mean by "zero knowledge", but it bothers me when companies say things like "we can't access your data because it's encrypted client-side". If the service provider controls the code in the client (as you do), the fact is the service provider definitely can access the data, you're just choosing not to. I don't think there is much difference between encrypting client-side when you control the clien…

There is a difference, and its about how the data is going to leak out. If the access can only happen via a key stored on the client, the client somehow has to supply that to the attacker (whether an official attacker or not). If every user's key and data are stored on the server then a compromise of every (or any) user becomes much more feasible. There isn't really a problem of data at rest being stolen (except for laptops/cell phones/usb sticks), it is stolen while live.

Overall though I would agree that you can't trust it much, because some code is downloaded from the server and then you trust that code (which can communicate with the server) with the key... Perhaps if it was in a local sandbox whose policies were enforced in a browser pref, or there was taint analysis applied to sensitive local data.

In years to come people will snicker at how wide open and insecure things were back in 201x.

Re: Dropbox Owns Cloud Storage on Mobile

#76

I really don't understand Dropbox. For the average user that wants to store, say, a few tens of GBs Dropbox costs $9.99 a month. Nevermind it gives 1TB total, most people don't need that much. iCloud, for example, costs $0.99/month. That's an _order of magnitude_ more expensive. Whichever way you slice it, it seems like Dropbox's core user base, that pays but doesn't take full advantage of the 1TB is bank-rolling the…

Dropbox just works. Go on vacation, my itinerary, all my travel docs, critical material, it's in Dropbox, and often available offline, since wifi can be spotty. Now its in my phone and my Ipad as well. It just works. And if you're cheap like me, you manage Dropbox, not waste it.

But iCloud is the sleeper. In particular, Notes seems to be open on my desktop and all my devices. A terrific application.

Re: Dropbox Owns Cloud Storage on Mobile

#77

I really don't understand Dropbox. For the average user that wants to store, say, a few tens of GBs Dropbox costs $9.99 a month. Nevermind it gives 1TB total, most people don't need that much. iCloud, for example, costs $0.99/month. That's an _order of magnitude_ more expensive. Whichever way you slice it, it seems like Dropbox's core user base, that pays but doesn't take full advantage of the 1TB is bank-rolling the…

Dropbox works. Put aside all the concerns over War Crimes or Spying, or Security, Dropbox simply works. Every mobile platform is supported. Every desktop platform is supported. Sharing, Teams, direct links, all the core features are there. Anyone can safely recommend and share Dropbox files with their Grandma (with a PC still running XP), or their Mac loving parents, or their weird hipster friend running Gentoo GNU/L…

You're right. It's been years since I carried around a flash drive, only to lose it, or not know which flash drive has...

Re: Dropbox Owns Cloud Storage on Mobile

#78

Earlier quoted context omitted.

Dropbox works. Put aside all the concerns over War Crimes or Spying, or Security, Dropbox simply works. Every mobile platform is supported. Every desktop platform is supported. Sharing, Teams, direct links, all the core features are there. Anyone can safely recommend and share Dropbox files with their Grandma (with a PC still running XP), or their Mac loving parents, or their weird hipster friend running Gentoo GNU/L…

> Every desktop platform is supported. Not every. Dropbox doesn't work on FreeBSD. But mobile client probably the best.

On occasion I am forced to use toPDF on my ios devices, plus some gymnastics to save documents to Dropbox.

This might have been obviated by some share nonsense I did with iPhotos. Dropbox seems to be working better and better.

Available offline is the killer feature of both Dropbox and Drive. You still cannot depend on connectivity, and have to plan ahead with critical documents. It becomes part of your travel routine.

Re: Dropbox Owns Cloud Storage on Mobile

#79

Earlier quoted context omitted.

I understand what you mean by "zero knowledge", but it bothers me when companies say things like "we can't access your data because it's encrypted client-side". If the service provider controls the code in the client (as you do), the fact is the service provider definitely can access the data, you're just choosing not to. I don't think there is much difference between encrypting client-side when you control the clien…

There is a difference, and its about how the data is going to leak out. If the access can only happen via a key stored on the client, the client somehow has to supply that to the attacker (whether an official attacker or not). If every user's key and data are stored on the server then a compromise of every (or any) user becomes much more feasible. There isn't really a problem of data at rest being stolen (except for…

If you store the keys, sure, that's less secure for sure.

But just because you encrypt server side doesn't mean you store keys.

What's the difference between:

  1. Get key from user on client
  2. Encrypt on client
  3. Discard key
  4. Discard unencrypted data
  5. Send encrypted data to server
  6. Store encrypted data
and:

  1. Get key from user on client
  2. Send key and data to server over SSL
  3. Encrypt on server in response handler
  4. Discard key
  5. Discard unencrypted data
  6. Store encrypted data
There are some differences, but I don't think it's clear which one is "better". I think it would depend on the details.

Big picture: either way the developer sees the key and the unencrypted data. Either way, you are completely trusting the competence of the developer at implementing this scheme, and their trustworthiness with the key and unencrypted data.

There is no such thing as "host-proof" encryption as long as the client is provided by the host.

Re: Dropbox Owns Cloud Storage on Mobile

#80

I really don't understand Dropbox. For the average user that wants to store, say, a few tens of GBs Dropbox costs $9.99 a month. Nevermind it gives 1TB total, most people don't need that much. iCloud, for example, costs $0.99/month. That's an _order of magnitude_ more expensive. Whichever way you slice it, it seems like Dropbox's core user base, that pays but doesn't take full advantage of the 1TB is bank-rolling the…

Dropbox works. Put aside all the concerns over War Crimes or Spying, or Security, Dropbox simply works. Every mobile platform is supported. Every desktop platform is supported. Sharing, Teams, direct links, all the core features are there. Anyone can safely recommend and share Dropbox files with their Grandma (with a PC still running XP), or their Mac loving parents, or their weird hipster friend running Gentoo GNU/L…

Yea, I agree. We were just saved by their unlimited versioning and now I only recommend Dropbox. If your business account files ever become encrypted make sure you call support immediately.
Post reply on HN