1y ago

We took a dive into the Dropbox privacy policy — it’s not good

proton.me

We took a dive into the Dropbox privacy policy — it’s not good | Proton

16 comments

Why do the people in this thread care if proton is digging into their competetors as far as i can see they have every rights and i see this as community awareness
Encryption will not protect your privacy in the specific case of Dropbox.
They look into your activity, not files.
And that's pretty much standard for any kind of commercial SaaS, just because of security concerns.
Also, they are quite transparent about the provider they are using for internal activities (Stripe, etc.). Companies in EU will typically not disclose such information. For example, Dropbox disclose the use of AWS (for hosting the infra & code, I guess), whereas Proton does not disclose any hosting company.
- Because they actually run their own infrastructure? They own their own IP space, so the only thing they'd be disclosing is the ISP's they advertise that IP space through, which you could glean via traceroute anyways.
  Don't get me wrong, these Proton blog posts are all just thinly veiled ads for their own products, but knocking them for not being transparent about their tech is disingenuous, with their track record of the opposite. Are they open source? No. Are they forthcoming on the steps they take to protect your data (including from themselves)? You betcha.
  Dropbox on the other hand has been breeches multiple times, and each time they slow walk customer notifications to try and mitigate damage to their brand, to the detriment of the customers.
  
  I was not saying "Dropbox good" or "Proton bad", just correcting a few things about the privacy policy in itself and what it means.
I have been meaning to empty my Dropbox and move everything over to proton drive.
BoxCryptor was bought by dropbox about a year ago.
Just use encryption like Cryptomator, before sending data to the cloud (so also Dropbox) and you are safe.
- So that solves the problem of them reading your files, but it doesn't solve the metadata collection portion.
  They will still have your location, details of your device, geo location data, probably IP space, not to mention the ability to do pattern of life analysis on you as you modify and move files.
  Protecting the contents of your files seems like a logical first step, but that's not the only step.
- I use encryption for my backups but so far it's proven too inconvenient for the actual files
  
  Why? Just store your files locally in the encrypted vault, which will be synced with Dropbox. And you could even use MountainDuck for the communication between Dropbox and your computer, so you don’t need the Dropbox software (and all the tracking/analytics) at all.
I wish they would stop bashing at other companies, it is quite a bad look to be fair
Ah yes company says competitor is no good

16 comments