News for hackers. Stuff that matters.

A comment on Goldman says client data leaked, wants Google to delete email. Parent comment

Re:Goldman says client data leaked, wants Google to delete e... by rdtsc on Wednesday July 02, 2014 @11:50PM (#7981341)
> used shared links to files (like via Dropbox or equivalent)

Wait, wouldn't that be sharing their data with Dropbox? If data is so sensitive, I don't see why is Dropbox necessarily more trustworthy than a random stranger with a gmail account.

I if got a random email from GS with some brokerage account mumbo jumbo I would assume it is span and delete it. So would my mom and most friend and most people out there probably.

Presumably if this "stranger" is random, one can make an argument that data would be safer with them then with a big cloud data aggregator (as that would be a single targeted point of attack).

Ideally they should probably set up their own file sharing service with the ability to explicitly share some files externally (taking all the necessary security measures).

[ Parent | on HN ]
Re:Goldman says client data leaked, wants Google to delete e... by dublinben on Thursday July 03, 2014 @12:16AM (#7981405)
They wouldn't literally use Dropbox. There are similar services like ShareFile from Citrix that offer secure filesharing.
[ Parent | on HN ]
Re:Goldman says client data leaked, wants Google to delete e... by joelrunyon on Thursday July 03, 2014 @12:04AM (#7981371)
You can revoke access to a shared dropbox file. You can also disable the shared links.
[ Parent | on HN ]
Re:Goldman says client data leaked, wants Google to delete e... by rdtsc on Thursday July 03, 2014 @12:33AM (#7981449)
You can but not to dropbox. Dropbox still has access. That is the problem, isn't it?
[ Parent | on HN ]
Re:Goldman says client data leaked, wants Google to delete e... by x0054 on Thursday July 03, 2014 @01:35AM (#7981629)
I assure you, I only used Dropbox as an example. Clearly a system like this should be implemented by the company it self. If it's important, you should store it on your own servers, and make sure that those servers are safe.
[ Parent | on HN ]
Re:Goldman says client data leaked, wants Google to delete e... by jackvalentine on Thursday July 03, 2014 @12:50AM (#7981493)
In this scenario Dropbox isn't actually being suggested as a solution, just as a model to get your head in the right space for understanding the solution.
[ Parent | on HN ]