News for hackers. Stuff that matters.
Re:What the CIA WikiLeaks Dump Tells Us: Encryption Works by smaddox on Saturday March 11, 2017 @10:21AM (#13845677)
Found that hard to believe, so I googled it. Not positive this is a trustworthy source, but it sounds like Dropbox does use encryption for files at rest and in motion: https://www.virtru.com/blog/dropbox-encryption/
Re:What the CIA WikiLeaks Dump Tells Us: Encryption Works by Laforet on Saturday March 11, 2017 @10:46AM (#13845760)
Dropbox is known to have intergration with PhotoDNA, a state program that matches file signature with a database of known illicit images. This would be impossible if the encryption used is irreversible and as far as I know dropbox never claimed otherwise.
Re:What the CIA WikiLeaks Dump Tells Us: Encryption Works by doubleunplussed on Saturday March 11, 2017 @09:13PM (#13848510)
Couldn't dropbox hash the images on the client, and upload the encrypted images as well as the hash? No need to upload an unencrypted file to do matching.
Re:What the CIA WikiLeaks Dump Tells Us: Encryption Works by eru on Sunday March 12, 2017 @09:10AM (#13850495)
Depends on what kind of hashing they do: a scheme like yours using a cryptographic hash would be defeated by just randomly changing a single bit in the image (eg appending some garbage bytes at the end); or re-encoding the jpeg. Of course, it could still catch non-techy people.
Re:What the CIA WikiLeaks Dump Tells Us: Encryption Works by smaddox on Saturday March 11, 2017 @10:50AM (#13845777)
I'm not claiming it is end-to-end, nor did I expect it to be, but perhaps some people would assume that. I thought you were claiming they don't use encryption at all.
Re:What the CIA WikiLeaks Dump Tells Us: Encryption Works by mikepurvis on Saturday March 11, 2017 @03:15PM (#13847010)
It's effectively nothing when Dropbox themselves have access to all your files whenever they want.
Re:What the CIA WikiLeaks Dump Tells Us: Encryption Works by jacquesm on Saturday March 11, 2017 @04:12PM (#13847288)
And whoever hacks dropbox, yours or all of them.
Re:What the CIA WikiLeaks Dump Tells Us: Encryption Works by Spooky23 on Saturday March 11, 2017 @11:51AM (#13846060)
They do, but Dropbox controls the key and their services can decrypt customer data, so the value of the encryption is limited at best.