Dropbox's Government Data Requests Principles

[DirtyDog]

Cloud computing is inherently insecure, if you're worried about security

It's secure enough for the CIA to use Amazon for a lot of their data.

[MicrosoftBob]

It's secure enough for the CIA to use Amazon for a lot of their data.

They are a government agency!, unless they're worried about the NSA spying on the CIA it's a bit academic

[scooterscot]

:
Demanding you hand over the passwords/keys or go to jail for 2 years.

Key disclosure law - Wikipedia, the free encyclopedia

What were the UK public smoking when that one slipped through? And people are okay with this?

The best secrets are the secret that keep themselves. I cannot give the password if I don't know it. And this is how I keep my passwords currently.

[scooterscot]

If you're worried about such tactics, why bother worrying about Dropbox being on American servers anyway?

Why not serve up a plate of Vaseline to help the authorities?

Most folks assume some I'm looking to protect illicit information. Not so. The information I'm looking to secure is commercially sensitive for a period of time. Mostly models.

If you knew a plane in operation somewhere in the world had a 90% probability of a duel in flight engine shutdown, would you get on it?

[original PM]

if the nsa or whoever want to go through my holidays snaps and pointless face book pictures they can go for it

will be an hour of their life they never get back.

what is it that you guys store which is so sensitive?

[DirtyDog]

They are a government agency!, unless they're worried about the NSA spying on the CIA it's a bit academic

Sorry, I assumed that when you said secure, you meant secure rather than "secure to everyone other than government agencies".

My mistake.

[DirtyDog]

Most folks assume some I'm looking to protect illicit information. Not so. The information I'm looking to secure is commercially sensitive for a period of time. Mostly models.

So encrypt it and stick it on dropbox (or a WD drive, or Symform, or SpaceMonkey, or Amazon, or Gmail etc. etc. etc.)

If you control the key, then they either need a court order to get it from you (or other persuasive methods). If you rely on a public cloud provider without encryption, then they are all going to be as bad as each other.

[scooterscot]

So encrypt it and stick it on dropbox (or a WD drive, or Symform, or SpaceMonkey, or Amazon, or Gmail etc. etc. etc.)

If you control the key, then they either need a court order to get it from you (or other persuasive methods). If you rely on a public cloud provider without encryption, then they are all going to be as bad as each other.

currently encrypted DMG archives are used, but it's a pain having to mount every time. Using firesafe on my Mac is the other method I use. So even if the laptop is stolen it more inconvenience than fook.

[doodab]

What is it that you guys store which is so sensitive?

It depends what you mean by sensitive.

I don't really have anything to hide from the NSA but I wouldn't want my books, bank statements, account details etc easily accessible to a petty thief, which they would be were my laptop bag to be stolen or lost, for example.

I also have a contractual duty to keep certain things secure on behalf of clients and using a secure USB drive provides them and me with some reassurance that when it comes to looking after trade secrets I've actually thought about it and I'm not going to leave anything important in an easily accessible form on the train.

I do use google docs & skydrive and so on, just not for anything that I wouldn't want others to see. I realise I can encrypt stuff in the cloud but doing so adds an extra level of hassle that I can't really be arsed with unless strictly necessary.

[Bunk]

It's secure enough for the CIA to use Amazon for a lot of their data.

I wonder how many of the alternative cloud solutions are based on S3 like Dropbox. Even if their terms state they won't hand anything over to the NSA, that doesn't do much good if Amazon will.