Live data from Hacker News

Tell HN: Dropbox now requires access to contacts for Google login

news.ycombinator.com

1–10 of 393 posts

Tell HN: Dropbox now requires access to contacts for Google login

#1
I remember I was using Google login to login to my Dropbox and in the last year or so Dropbox started asking me to access my contacts in Google. I would always deny access and still manage to successfully login. Yesterday I tried the same but with no luck. I contacted Dropbox support and this is their reply:

> I'm afraid that is not possible at the time. I apologize for any inconvenience this may cause.

Interesting that they chose this route when users are getting more and more privacy-aware.

Re: Tell HN: Dropbox now requires access to contacts for Google login

#2
DropBox seems to have decided that the only way for them to grow is to turn their data sync platform into a collaborative platform. Makes a whole lot of sense to steal contacts from all your users.

FYI - never use oauth to log into anything you care about.

Re: Tell HN: Dropbox now requires access to contacts for Google login

#4

DropBox seems to have decided that the only way for them to grow is to turn their data sync platform into a collaborative platform. Makes a whole lot of sense to steal contacts from all your users. FYI - never use oauth to log into anything you care about.

Sadly, you can't have a product that does one thing and does it well when you have to show never-ending growth to investors :(

Re: Tell HN: Dropbox now requires access to contacts for Google login

#6

DropBox seems to have decided that the only way for them to grow is to turn their data sync platform into a collaborative platform. Makes a whole lot of sense to steal contacts from all your users. FYI - never use oauth to log into anything you care about.

> FYI - never use oauth to log into anything you care about.

Interesting remark. I'm not objecting but it's interesting that this goes against what can one read here very often from people who comment on new products, which goes like this: "if you offered oauth sign up, I'd sign up but won't bother with creating an account". Just an observation.

Re: Tell HN: Dropbox now requires access to contacts for Google login

#7

Isn't that against GDPR for european users?

I was going to say no (and I've left my logic below for posterity), but maybe you have a point. The OP can't continue to use Dropbox without giving up some more privacy. They can't even get in to get their data out (although GDPR does take care of that).

Previous logic: They've asked for permission, been clear about what data they and presumably haven't prechecked anything (because they don't have control over that UI).

I don't think GDPR has any protection about a vendor locking you in and then asking to change the privacy policy.

Re: Tell HN: Dropbox now requires access to contacts for Google login

#8
post #5

Wow, this is awful. I just tried to log into my account and I can't unless I give them access to my contacts. This is completely unacceptable - feels like a ransom.

You should be still able to log in with the same email with user/password, without being asked for a new permission.

Re: Tell HN: Dropbox now requires access to contacts for Google login

#9

DropBox seems to have decided that the only way for them to grow is to turn their data sync platform into a collaborative platform. Makes a whole lot of sense to steal contacts from all your users. FYI - never use oauth to log into anything you care about.

Not following. What's wrong with oauth?
Post reply on HN