OT: Drop Box - is it secure?

Stephen cryptworks at gmail.com
Mon Apr 9 21:32:18 MST 2012


well if you encrypt a folder inside dropbox it works locally, and then
when there is a change it replicates it.

not sure how it would play for others however.

On Mon, Apr 9, 2012 at 9:09 PM, Michael Butash <michael at butash.net> wrote:
> Check out sugarsync... some pretense at least of security there at least.
>
> https://www.sugarsync.com/
>
> Aside from that, I'm sure the others would hand it over in a nice formatted
> and unmolested disk image for them to pour over like facebook does.
>
> http://www.zdnet.com/blog/facebook/heres-what-facebook-sends-the-cops-in-response-to-a-subpoena/11528
>
> I've seen how-to's for using truecrypt or luks disk image within a "cloud
> folder", but I'm not so sure that's really a good idea either when you're
> talking about deltas of a binary disk image + encryption for usable
> performance.  Seems like it'd suck, or suck up all usable bandwidth between
> you and them on a regular basis.
>
> I'm contemplating sugarsync (linux/android support too), but I still don't
> trust them fully with my _raw_ data, especially not a homedir I rsync
> normally local between 3 systems.  With all my work/customer data,
> enterprises a lot less forgiving will come hunting the day someone merely
> asks for it with or without warrant.  Laws are fishy like that these days,
> let alone the folks that will just take it anyways with no one apparently
> the wiser.
>
> -mb
>
>
>
> On 04/09/2012 08:37 PM, keith smith wrote:
>>
>>
>> Thank you to everyone who replied. Worse than I thought.
>>
>> ------------------------
>> Keith Smith
>>
>> --- On *Mon, 4/9/12, Stephen /<cryptworks at gmail.com>/* wrote:
>>
>>
>>    From: Stephen <cryptworks at gmail.com>
>>    Subject: Re: OT: Drop Box - is it secure?
>>    To: "Main PLUG discussion list" <plug-discuss at lists.plug.phoenix.az.us>
>>    Date: Monday, April 9, 2012, 1:43 PM
>>
>>    you have 2 options, encrypt it before you share it. use pgp for
>>    example. or not to use it.
>>
>>    To be fair it is a 3rd party company and it is their business to be
>>    trustworthy. but it really depends on how trusting you are of a 3rd
>>    party company.
>>
>>    On Mon, Apr 9, 2012 at 1:38 PM, keith smith <klsmith2020 at yahoo.com
>>    </mc/compose?to=klsmith2020 at yahoo.com>> wrote:
>>
>>
>>        Hi,
>>
>>        Someone wants me to share some confidential information by
>>        uploading documents to his Drop Box account. My gut tells me
>>        this is not a secure was to transfer confidential information.
>>
>>        Any thoughts?
>>
>>        Thanks in advance!
>>
>>        ------------------------
>>        Keith Smith
>>
>>
>>        ---------------------------------------------------
>>        PLUG-discuss mailing list -
>>        PLUG-discuss at lists.plug.phoenix.az.us
>>        </mc/compose?to=PLUG-discuss at lists.plug.phoenix.az.us>
>>        To subscribe, unsubscribe, or to change your mail settings:
>>        http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
>>
>>
>>
>>
>>    --
>>    A mouse trap, placed on top of your alarm clock, will prevent you
>>    from rolling over and going back to sleep after you hit the snooze
>>    button.
>>
>>    Stephen
>>
>>    -----Inline Attachment Follows-----
>>
>>    ---------------------------------------------------
>>    PLUG-discuss mailing list - PLUG-discuss at lists.plug.phoenix.az.us
>>    </mc/compose?to=PLUG-discuss at lists.plug.phoenix.az.us>
>>    To subscribe, unsubscribe, or to change your mail settings:
>>    http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
>>
>>
>>
>> ---------------------------------------------------
>> PLUG-discuss mailing list - PLUG-discuss at lists.plug.phoenix.az.us
>> To subscribe, unsubscribe, or to change your mail settings:
>> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
>
> ---------------------------------------------------
> PLUG-discuss mailing list - PLUG-discuss at lists.plug.phoenix.az.us
> To subscribe, unsubscribe, or to change your mail settings:
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss



-- 
A mouse trap, placed on top of your alarm clock, will prevent you from
rolling over and going back to sleep after you hit the snooze button.

Stephen


More information about the PLUG-discuss mailing list