News for hackers. Stuff that matters.

A comment on Edward Snowden’s Privacy Tips: “Get Rid of Dropbox,” Avoid Facebook and Google. Parent comment

Re:Edward Snowden’s Privacy Tips: “Get Rid of Dropbox,” Avoi... by gizmo686 on Saturday October 11, 2014 @08:01PM (#8443794)
When I started using DropBox, I made an encrypted directory (using EncFS) for the stuff I cared about keeping private. This keeps the real-time sync element of DropBox, and avoids needing to reupload all of the encrypted files whenever one changes (although it does prevent incremental updates on individual files).

As an added bonus, these files are now encrypted on my machine as well.

[ Parent | on HN ]
Re:Edward Snowden’s Privacy Tips: “Get Rid of Dropbox,” Avoi... by colordrops on Saturday October 11, 2014 @09:09PM (#8443950)
The problem with your solution is that you have the closed source drop box app on your machine, and it could be reading anything, including the contents of those files before they are encrypted.
[ Parent | on HN ]
Re:Edward Snowden’s Privacy Tips: “Get Rid of Dropbox,” Avoi... by StavrosK on Saturday October 11, 2014 @09:17PM (#8443969)
EncFS isn't supposed to be used against people who have access to the ciphertext at different times. Consider any file you've changed at least once as compromised.
[ Parent | on HN ]
Re:Edward Snowden’s Privacy Tips: “Get Rid of Dropbox,” Avoi... by newscracker on Sunday October 12, 2014 @01:16AM (#8444478)
EncFS, as you may be aware, only encrypts the contents of the files. The metadata (filename, size, timestamps) is available in clear, and a lot could be inferred from metadata if you don't want to trust others who could access the raw bits.
[ Parent | on HN ]