Dropbox removed ability to opt your files out of AI training::undefined

  • LastYearsPumpkin@feddit.ch
    link
    fedilink
    English
    arrow-up
    115
    ·
    9 months ago

    Why does dropbox have the ability to see your files at all? That seems like a pretty bad security flaw in the first place.

    • hersh@literature.cafe
      link
      fedilink
      English
      arrow-up
      7
      arrow-down
      2
      ·
      9 months ago

      There are drawbacks to end-to-end encryption (E2EE). I’m not aware of any E2EE cloud storage systems that have the features Dropbox provides. I would LOVE to know of any that…

      1. Support at least the big 5 platforms (Android/iOS/Mac/Windows/Linux).

      2. Have a functional web interface.

      3. Support sharing and collaboration.

      4. Have a search feature

      5. Sync to the local filesystem on a folder-by-folder or even file-by-file basis

      6. Integrate with other tools (e.g. android file picker)

      It’s not easy to do all that with E2EE, like a functional web interface, search, and integration.

      ProtonMail’s search, for example, is limited to subject and metadata, and that’s specifically because they DON’T use E2EE for that.

      I’m willing to compromise some of this for the sake of E2EE, but I’m not at all surprised that feature-first services are more popular than privacy-first services.

        • hersh@literature.cafe
          link
          fedilink
          English
          arrow-up
          3
          ·
          9 months ago

          I just checked to see if I missed a big update.

          There’s still no Linux client, and it cannot sync files on Android (it only supports photo backups).

          I can’t work around that limitation on Android with FolderSync, either, the way I can with Google Drive, Dropbox, Box, or any WebDAV- or S3-compatible server. Since it uses E2EE, any uploads need to go directly through the app, so integrations are difficult.

          It doesn’t seem to have a search feature, either, at least not on Android. I can’t imagine there’s any content-aware search on the web UI, since that can’t be done server-side.

          There’s been some interesting research in homomorphic encryption over the past couple years, which might someday lead to encrypted server-side search. But I think there are still major hurdles to actually implementing it securely and efficiently.