News for hackers. Stuff that matters.

A comment on Ask HN: What's your favorite online-backup tool?. Parent comment

Re:Ask HN: What's your favorite online-backup tool? by martey on Saturday November 27, 2010 @11:13PM (#1946646)
Dropbox's website suggests that they store files using some sort of AES-256 encryption and they cannot read them: https://www.dropbox.com/help/27 I wouldn't make the claim that they are more (or as) secure as Tarsnap (especially since there is no page as detailed as http://www.tarsnap.com/crypto.html on Dropbox's website), but this suggests that files on Dropbox are not readable by the company.
[ Parent | on HN ]
Re:Ask HN: What's your favorite online-backup tool? by quadhome on Sunday November 28, 2010 @12:47AM (#1946781)
"Suggests." However, the fact that there is a web GUI tells us they can read the data.
[ Parent | on HN ]
Re:Ask HN: What's your favorite online-backup tool? by eli on Sunday November 28, 2010 @01:04AM (#1946804)
...when they are provided with your password.
[ Parent | on HN ]
Re:Ask HN: What's your favorite online-backup tool? by cperciva on Sunday November 28, 2010 @01:30AM (#1946845)
If you forget your password, can Dropbox reset it for you? If they reset your password for you, can you still read your data? If the answer to both of these is "yes", then dropbox can read your data without you providing your password.

(Honest questions -- I don't use Dropbox, so don't know.)

[ Parent | on HN ]
Re:Ask HN: What's your favorite online-backup tool? by esun on Sunday November 28, 2010 @03:18AM (#1946990)
This comment is cryptographically correct.
[ Parent | on HN ]
Re:Ask HN: What's your favorite online-backup tool? by tzury on Sunday November 28, 2010 @05:19AM (#1947100)
+1, https://www.dropbox.com/forgot is a password reset link.

Besides, there is much more to cryptography and building a secured system than just using that crypto suit or another (e.g. AES256-HMAC-SHA256 etc.)

[ Parent | on HN ]