News for hackers. Stuff that matters.
Re:Upcoming talk on hijacking Dropbox accounts by Mindless2112 on Friday July 12, 2013 @06:58PM (#6035849)
> Finally, we describe the design and implementation of an open-source version of Dropbox client (and yes, it runs on ARM too).

I wonder how long that implementation will continue to work. The official Dropbox client auto-updates (well, the Windows one does; Linux doesn't, afaik), so Dropbox can almost change the protocol whenever they like.

Re:Upcoming talk on hijacking Dropbox accounts by pudquick on Friday July 12, 2013 @07:47PM (#6036051)
This part of the talk is probably the part I have the least interest in, honestly.

It would be cool, yes, to act like a first-party Dropbox client and have full access to my account via open tools.

But in the meantime, they do have a python API and SDK:

https://www.dropbox.com/developers/core/sdks/python

This lets me setup a sub-folder under my account with no more than python present on a machine and perform upload / downloads of content. Nothing processor architecture-specific about it. And with python modules like https://pypi.python.org/pypi/watchdog it's pretty trivial to trigger a re-upload of local content when it changes. The API provides counterparts for detecting changes in remote content (the /delta command).

In fact, this is how I've got Dropbox access running on my gen1 AppleTV :)

I'm more generally interested in the process of reversing of the code and protocols.

Re:Upcoming talk on hijacking Dropbox accounts by Mindless2112 on Friday July 12, 2013 @08:00PM (#6036089)
Building your own is great, but all I really want is a small package that I can drop on my ARM NAS that will keep a copy of my Dropbox data. Dropbox themselves have been dragging their feet on this for some unexplained reason.
Re:Upcoming talk on hijacking Dropbox accounts by pudquick on Friday July 12, 2013 @08:10PM (#6036118)
> drop on my ARM NAS that will keep a copy of my Dropbox data

Do you also have Dropbox installed on a desktop at your place?

Maybe you could co-monitor your desktop Dropbox folder using this: http://sparkleshare.org/

It appears to be a Mono/.NET based project, but apparently there's Mono for ARM.

There's probably other options as well - just a thought :)

Re:Upcoming talk on hijacking Dropbox accounts by kevingadd on Friday July 12, 2013 @09:54PM (#6036392)
When did Windows Dropbox start auto-updating? I've never seen it update; one of my machines had a client from like 3 years ago and another machine had a client from a year and a half ago.
Re:Upcoming talk on hijacking Dropbox accounts by Mindless2112 on Friday July 12, 2013 @11:11PM (#6036535)
It's been that way as long as I can remember, though I could be misremembering. It's mentioned in the Dropbox help [1].

[1] https://www.dropbox.com/help/13/en

Re:Upcoming talk on hijacking Dropbox accounts by zeckalpha on Saturday July 13, 2013 @12:52PM (#6037964)
That's the point.