News for hackers. Stuff that matters.

A comment on Ask HN: Dropbox security bug?.

Re:Ask HN: Dropbox security bug? by andyhart on Tuesday October 23, 2012 @09:12AM (#4687910)
Yep, I can see two folders in there and your 26.76MB PDF file. Also lets me delve into the subfolders.

I always wondered about this as well. Surely if you share the URL with someone, they could reshare it and as you say you then don't know who has access.

[ Parent | on HN ]
Re:Ask HN: Dropbox security bug? by chris_dcosta on Tuesday October 23, 2012 @09:18AM (#4687931)
Yes that's my point.

It seems to undermine the idea of security. I'd rather have that functionality limited in someway that makes it clear that you are making the folder "public" and no longer private.

[ Parent | on HN ]
Re:Ask HN: Dropbox security bug? by schmrz on Tuesday October 23, 2012 @09:52AM (#4688069)
Public means that anyone can access it without any verification/authentication info. Private in this context would mean that it's limited to people who received the link.
[ Parent | on HN ]
Re:Ask HN: Dropbox security bug? by chris_dcosta on Wednesday October 24, 2012 @04:23AM (#4692124)
Yep - but I challenge you to determine that from the sharing dialogue.
[ Parent | on HN ]