An Interest In:
Web News this Week
- March 31, 2024
- March 30, 2024
- March 29, 2024
- March 28, 2024
- March 27, 2024
- March 26, 2024
- March 25, 2024
Some of Our Sources
- Slashdot
- TutsPlus - Code
- Smashing Magazine
- Smashing Apps
- Naldz Graphics
- Crazy Leaf Design
- Freelance Switch
- Design Modo
- Codrops
- Android Headlines
Help Webnuz
Referal links:
April 21, 2011 02:24 am PDT
Original Link: http://feeds.boingboing.net/~r/boingboing/iBag/~3/pTtqOUAPQLM/dropboxs-new-securit.html
Dropbox's new security policy implies that they lied about privacy from the start
Miguel de Icaza noticed that Dropbox's new security terms of service allows it to decrypt your stored files for law enforcement; but Dropbox has always claimed that it did not store the keys necessary to do this. This has been used as both a selling point ("we keep your files so safe, we can't access them") and an excuse ("don't ask us for help if you lose your crypto keys, we don't store them"), but it was, apparently, a lie. De Icaza worries that a company that lies about its crypto and security policy may not be trustworthy when it comes to files containing sensitive information: If companies with a very strict set of security policies and procedures like Google have had problems with employees that abused their privileges, one has to wonder what can happen at a startup like Dropbox where the security perimeter and the policies are likely going to be orders of magnitude laxer. Dropbox needs to come clear about what privacy do they actually offer in their product. Not only from the government, but from their own employees that could be bribed, blackmailed, making some money on the side or are just plain horny. Dropbox needs to recruit a neutral third-party to vouch for their security procedures and their security stack that surrounds users' files and privacy. If they are not up to their own marketed statements, they need to clearly specify where their service falls short and what are the potential security breaches that Unless Dropbox can prove that algorithmically they can protect your keys and only you can get access to your files, they need to revisit their public statements and explicitly state that Dropbox storage should be considered semi-public and not try to sell us snake oil. Dropbox Lack of Security (via JWZ)...
Original Link: http://feeds.boingboing.net/~r/boingboing/iBag/~3/pTtqOUAPQLM/dropboxs-new-securit.html
Share this article:
Tweet
View Full Article
