OT: Drop Box - is it secure?

[Michael Butash]

Check out sugarsync... some pretense at least of security there at least.

https://www.sugarsync.com/

Aside from that, I'm sure the others would hand it over in a nice 
formatted and unmolested disk image for them to pour over like facebook 
does.

http://www.zdnet.com/blog/facebook/heres-what-facebook-sends-the-cops-in-response-to-a-subpoena/11528

I've seen how-to's for using truecrypt or luks disk image within a 
"cloud folder", but I'm not so sure that's really a good idea either 
when you're talking about deltas of a binary disk image + encryption for 
usable performance.  Seems like it'd suck, or suck up all usable 
bandwidth between you and them on a regular basis.

I'm contemplating sugarsync (linux/android support too), but I still 
don't trust them fully with my _raw_ data, especially not a homedir I 
rsync normally local between 3 systems.  With all my work/customer data, 
enterprises a lot less forgiving will come hunting the day someone 
merely asks for it with or without warrant.  Laws are fishy like that 
these days, let alone the folks that will just take it anyways with no 
one apparently the wiser.

-mb



On 04/09/2012 08:37 PM, keith smith wrote:
>
> Thank you to everyone who replied. Worse than I thought.
>
> ------------------------
> Keith Smith
>
> --- On *Mon, 4/9/12, Stephen /<cryptworks at gmail.com>/* wrote:
>
>
>     From: Stephen <cryptworks at gmail.com>
>     Subject: Re: OT: Drop Box - is it secure?
>     To: "Main PLUG discussion list" <plug-discuss at lists.plug.phoenix.az.us>
>     Date: Monday, April 9, 2012, 1:43 PM
>
>     you have 2 options, encrypt it before you share it. use pgp for
>     example. or not to use it.
>
>     To be fair it is a 3rd party company and it is their business to be
>     trustworthy. but it really depends on how trusting you are of a 3rd
>     party company.
>
>     On Mon, Apr 9, 2012 at 1:38 PM, keith smith <klsmith2020 at yahoo.com
>     </mc/compose?to=klsmith2020 at yahoo.com>> wrote:
>
>
>         Hi,
>
>         Someone wants me to share some confidential information by
>         uploading documents to his Drop Box account. My gut tells me
>         this is not a secure was to transfer confidential information.
>
>         Any thoughts?
>
>         Thanks in advance!
>
>         ------------------------
>         Keith Smith
>
>
>         ---------------------------------------------------
>         PLUG-discuss mailing list -
>         PLUG-discuss at lists.plug.phoenix.az.us
>         </mc/compose?to=PLUG-discuss at lists.plug.phoenix.az.us>
>         To subscribe, unsubscribe, or to change your mail settings:
>         http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
>
>
>
>
>     --
>     A mouse trap, placed on top of your alarm clock, will prevent you
>     from rolling over and going back to sleep after you hit the snooze
>     button.
>
>     Stephen
>
>     -----Inline Attachment Follows-----
>
>     ---------------------------------------------------
>     PLUG-discuss mailing list - PLUG-discuss at lists.plug.phoenix.az.us
>     </mc/compose?to=PLUG-discuss at lists.plug.phoenix.az.us>
>     To subscribe, unsubscribe, or to change your mail settings:
>     http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
>
>
>
> ---------------------------------------------------
> PLUG-discuss mailing list - PLUG-discuss at lists.plug.phoenix.az.us
> To subscribe, unsubscribe, or to change your mail settings:
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss