![]() The contents of a file will never be accessed by a Dropbox employee without the user’s permission. This is not an intentionally misleading statement – it is enforced by technical access controls on our backend storage infrastructure as well as strict policy prohibitions. ![]() ![]() In our help article we state that Dropbox employees aren’t able to access user files. They have apologized for the confusion and have clarified to some extent what employees can and cannot do. Issue #3 is largely the result of Dropbox stating something unclearly in their security FAQ. The most recent version of Dropbox for 1.1.24 (April 15) for Mac and Windows. This, of course, means that if you haven’t updated Dropbox on your desktop recently, it is time to do so. We are also working diligently on a solution that will make the authentication file useless on a second computer. Last week’s update to the Dropbox desktop application already sets more restrictive permissions on the folder that stores the authentication file. There was substantial room for improvement in how Dropbox handles these tokens, but we are happy to report that they have already made important improvements and promise more, saying: Some secret token must be stored on the client computer which is used for automated authentication. Issue #2 is something that is faced by any system that involves automatic login without user intervention. If you are using Dropbox on mobile devices for things other than 1Password, then you should be careful not to include sensitive information in your file names. They take steps to limit what individual employees can decrypt, but the capability to undo Dropbox encryption remains with Dropbox.īecause our filenames are arbitrary, issue #1 has no effect on 1Password security.1Password does its own encryption, so removing Dropbox encryption (issue #3) is not really a problem for mobile 1Password users. Dropbox have now clarified and corrected the original statement.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |