Reply to: Dropbox

[NotAllThere]

No!

Give it a few minutes and this thread will go off-topic with every poster insulting each other.

That was the plan.

[SimonMac]

Begone maloderous techie. :shoo-away-smiley:

malodorous

[Bunk]

Begone maloderous techie. :shoo-away-smiley:

Don't go bringing your facts in here!!

[MarillionFan]

Dropbox???

Tell him about Google Docs. Much safer.

[suityou01]

I wonder where Dropbox store people's stuff.

What's that? Amazon S3, you say? Well I never.

Begone maloderous techie. :shoo-away-smiley:

[Sysman]

The CEO of one of my client's divisions has suggested that dropbox be used to distribute confidential information. Is this insane - might as well publish direct to wikileaks - or is it really secure and robust?

Insane. They have tightened up since they had a couple of password leaks but that should be ample warning.

You probably want to read this El Reg article. If the author is the guy I seem to remember it isn't as comprehensive an article as I would have expected, but it's a good starting point for the discussion.

Over the last year or so the Yanks have tried to assert jurisdiction over web sites and had them closed based on the following arguments:

• the servers are located in the US
• the domain name's registrar is located in the US
• the domain is a .com

Even where Microsoft will promise to host your cloud within say, the EU, they say that as a US company they will have to comply with US law and reveal customer info if required to do so.

You could have a look at things like Wuala or SpiderOak, where the encryption is done at the client. Both companies promise that they cannot decrypt the data they host. However, Wuala depends on Java and that has been a big no-no for many security conscious folks for a long time.

I tried SpiderOak a year or so ago but it was quite frankly too much of a hassle. Maybe I'll give it another chance.

At the end of the day I don't trust the Yanks to resist abusing the legal system for competitive advantage.

[d000hg]

Would not put anything even slightly sensitive in a system like dropbox. The files must reside one their servers somewhere and are totally out of your organistation's control and you don't have a clue who could snoop on them IMO.

DB doesn't encrypt files IIRC but I don't buy the "if it's not on your physical PC it's not safe" line. Your bank accounts don't live on your own PCs under your control either.

[amcdonald]

truecrypt file on dropbox.

truecrypt can be hacked fairly easily

[Bunk]

This is typical airline magazine reading. He's read about the 'cloud' and decided thats the way to go. Let him go ahead with planning and presentations and all that old bollocks and on the day that no-one can access these documents, surreptiously leave copies of all his pre-cloud planning work around and you'll see him walked off of the premises.

No you won't. The CEO doesn't get walked off the premises for something like that. The people who implemented it might though.

[darmstadt]

The CEO of one of my client's divisions has suggested that dropbox be used to distribute confidential information. Is this insane - might as well publish direct to wikileaks - or is it really secure and robust?

This is typical airline magazine reading. He's read about the 'cloud' and decided thats the way to go. Let him go ahead with planning and presentations and all that old bollocks and on the day that no-one can access these documents, surreptiously leave copies of all his pre-cloud planning work around and you'll see him walked off of the premises.

[AtW]

I'd rather put my cock in a crocodiles gob tbh

I find your lack of faith in Dropbox disturbing.

[doodab]

I'd rather put my cock in a crocodiles gob tbh

[NickFitz]

Amazon S3's JungleDisk has true AES encryption. Dropbox is for girls.

I wonder where Dropbox store people's stuff.

What's that? Amazon S3, you say? Well I never.

[northernladuk]

What is the difference better a mod and a proper mod?

A good question. To find the answer I propse that a better one bans BP for a week and a proper one then bans BP for the week after and see which of the two actually get it right

[BrilloPad]

Can a proper mod move this to Technical please.

What is the difference better a mod and a proper mod?