News for hackers. Stuff that matters.

A comment on Dropbox S-1. Parent comment

Re:Dropbox S-1 by varenc on Friday February 23, 2018 @07:55PM (#16450956)
Dropbox, GDrive, Box, OneDrive, etc. aren't using zero-knowledge encryption, so it must be technically feasible for them to access user data. If a company has a forgotten password reset feature, it's a good sign that it's possible for them to access your data.

You have to trust the company providing the service, right? Of course in practice, accessing user data should be tightly controlled and require good business reasons and levels of approval.

Zero-knowledge alternatives like Spideroak exist, but this approach makes them sacrifice features. (and doesn't appear very popular based on market share)

[ Parent | on HN ]
Re:Dropbox S-1 by mikepurvis on Friday February 23, 2018 @08:44PM (#16451131)
It's not as black and white as all that. In the early days, it was probably a trivial operation for any employee to examine any customer's dropbox content. Hopefully these days the prod machines and backups.are walled from all but a rotating team of SREs, whose own actions on them are subject to audit.
[ Parent | on HN ]