Dropbox Flaws | TechSNAP | 1

Get the full details are two major issues with Dropbox, that are simply built into the core of the software/service. Plus WordPress has undergone a multi-server hack, and Facebook gives away their plans for the ultimate data center!

Show Notes & Episode Download: http://bit.ly/tsnap1

Category:

Science & Technology

Tags:

• Dropbox Security
• encryption
• WordPress Hack
• facebook datacenter
• Comodo SSL
• unqualified domain
• techsnap

[Gabbos]

I love the show, its an instant hit! its a winner for sure. I'm curious though, is Allen going to be the permanent co-host for the show or was he just today's guest?

[jupiterbroadcasting]

@Gabbos Allan is the man! He'll be joining me every week, he's got a great take on stuff, and it's often not the same as my own!

-Chris

[jupiterbroadcasting]

We've updated the show notes for this episod with the RSS feeds! Comments don't let me link, but there's one in the video's notes. We'd love to have you guys subscribe from the start!!!

-Chris

[hendrikharryg]

Oh my gosh: I just got tropped here by the techsnap playlist and I was suprised to see how different you guys looked 41 weks ago ^^ Alan now has a beard and Chris' hairs and beard seem darker

[Damnated6mil]

@ShaneQful well, look at the iCloud Apple revealed this Monday. It's pretty much a Ubuntu One clone imo.

[ShaneQful]

@Damnated6mil when did steve jobs say it was cool ?

[Damnated6mil]

@ShaneQful Ubuntu One is definitely cool, even Steve Jobs thinks so =D, it depends on what you need I guess. I'm fine with giving up a couple of cool features in the favor of real security. I have used Ubuntu One for music streaming, and still use dropbox ocassionally, but only for throwaway files. SpiderOak I can use for backup :)

[ShaneQful]

@Damnated6mil Exactly to be quite honest I love ubuntu one and I use it all the time the publishing feature is especially cool and slightly more advanced than all its competitors but if I want to securely sync things between my machines I use SFTP and technically SVN buts thats only for code because while I trust canonical they can still get hacked and I could be the on the unlucky storage server.

[Damnated6mil]

@ShaneQful There is literally not one concrete information about how they encrypt the data, and to be honest, I'm just not comfortable with every 'authorized' employee accessing my data, regardless of what I share.

[Damnated6mil]

@ShaneQful but most importantly "The information you provide to us will be held on computers and may be accessed by or given to our staff working inside and outside of the UK and to third parties" BUT they go on saying that "these measures include SSL data encryption to transmit your data securely to Ubuntu One as well as technical architectures and systems to prevent unauthorised internal employees, contractors and affiliated organizations from accessing your data."

[ShaneQful]

@Damnated6mil More important than any of that though is that Canonical unlike dropbox didn't lie to its users about how it encrypts the data. Hell you can go into lauchpad and see discussions about this in bug wishlists and the devs replying after coming back from uds and brainstorming about it.

[ShaneQful]

@Damnated6mil To some extent you are right that they can get at my data but unlike dropbox on the server they encrypt with a user specific key and spread they data-bases of those keys over multiple independent servers so if they get hacked only a small portion of user data can be taken. Also ubuntu depending on how you set it up allows a very simple right click-> encrypt which encrypts with your private key on your system so you can quite easily encrypt client side. 

[Damnated6mil]

@ShaneQful Well, they're certainly more upfront about the lack of privacy: "We also store information such as full name, email address, and password." and "To comply with legal and regulatory requirements (including responding to subpoenas and to prevent crime). These special circumstances may require us to disclose personally identifiable information."