Dropbox 'deceived' users over security: Files are open to government searches
Summary: Dropbox 'deceived' users about the security and encryption of its cloud storage services, according to a complaint made to the FTC.
Post updated: 16:55 PST.
Dropbox, one of the favourite cloud synchronisation services available for free, 'deceived' its users about the security and encryption of its cloud storage services.
A complaint made to the Federal Trade Commission suggests Dropbox employed "deceptive trade practices" by putting it "at a competitive advantage", with users being told that that Dropbox employees could not access your files or data when they could. It also meant that as files were able to be decrypted by employees.
David Gewirtz's assertions were correct. You shouldn't use Dropbox if you have something to hide.
Data held in Dropbox was and still us vulnerable to inspection by U.S. authorities.
The full complaint can be found here.
Only last month, PhD student Christopher Soghoian at Indiana University, blew the whistle on the popular cloud storage service, which now serves as evidence in the complaint submitted to the FTC.
Though Dropbox has now revised statements on its website relating to file security and how employees have access to the encryption keys to unlock your files, the damage is still done.
The service is popular amongst students who use it not only to hold their university work but music files also, with 2GB of free storage available in an instant.
A company spokesperson told me:
"We believe this complaint is without merit, and raises old issues that were addressed in our blog post on April 21, 2011. Millions of people depend on our service every day and we work hard to keep their data safe, secure, and private."
This post reflecting the change in terms and conditions were added after the allegations were made by Soghoian.
Dropbox may have a lot of work on its hands to restore faith in its service. It has been a rough week for major companies dealing with public relations spats, especially after the alleged Facebook smear campaign against Google.
Kick off your day with ZDNet's daily email newsletter. It's the freshest tech news and opinion, served hot. Get it.
Talkback
Why is this any surprise?
RE: Dropbox 'deceived' users over security: Files are open to government searches
RE: Dropbox 'deceived' users over security: Files are open to government searches
RE: Dropbox 'deceived' users over security: Files are open to government searches
and..
your account is probably flagged for review if you suddenly get spooked and delete your files from dropbox
I'm sure they keep your files as long as necessary after you think they are deleted due to "National Security"
Not "Your Security"
Never use closed source encrytion!
Encrypt it at least twice if its that important
Never put ANYTHING in the cloud that can be used against you "EVER"
U.S. Corporations are required to deceive you in order to gather intelligence data for the Gov't and are under no obligation to inform you under penalty of Law!
RE: Dropbox 'deceived' users over security: Files are open to government searches
First MS BPOS, then Google Blogs, now Dropbox.
Can't say I'm surprised by this one though; but, as a non-user of Dropbox, I also am not affected.
RE: Dropbox 'deceived' users over security: Files are open to government searches
Thank you very much.
Deleted, But Not Gone
RE: Dropbox 'deceived' users over security: Files are open to government searches
RE: Dropbox 'deceived' users over security: Files are open to government searches
RE: Dropbox 'deceived' users over security: Files are open to government searches
RE: Dropbox 'deceived' users over security: Files are open to government searches
I'm also concerned about security issues. As such, my only "cloud" computing is my external hard drive which remains in the OFF condition unless I'm actually accessing it for backup.
I use Dropbox only for sharing family photos with specific people. Nothing else goes on there.
I think you should be investigating ALL security issues. Microsoft also has "PCSecurity" that, in past, at least, sent personal data up to their servers at least once per session. Using a hex editor, I found a friend's credit card data (number, expiration date and 3-digit security code) embedded in one of these files on his computer. That was with WinXP. Are they still doing this with Win7? I don't know but wouldn't put it past them. Microsoft buying Skype is going to have me dropping that little "gold mine" of information off my computer as soon as I see what changes they make to the Terms of Use statement.
We don't have privacy in this country any more. The PATRIOT Act has created the New East Berlin out of the USA. The government and Big Business have all the power now, not the people.
The cloud is BS
Aside from the fact that the US internet infrastructure is two orders of magnitude too slow to support it, there remains the fact that many vendors of services just aren't up to the job.
The cloud might be fine for cases in which non-contiguous locations must share data. The rest of us shouldn't be too quick to toss out our external hard-drives.
RE: Dropbox 'deceived' users over security: Files are open to government searches
But for those depending on services like these for amrtphones and tablets this is another issue.
:(
RE: Dropbox 'deceived' users over security: Files are open to government searches
I couldn't agree more. The same goes for "software as service." I won't be throwing out my software CDs any time soon. Once we migrate in mass to complete dependence on the cloud for all of our software and data, we will be enslaved by the same.
I like the idea of being able to have a PC that is completely offline and still functional for all the basic tasks such as word processing, accounting, and the like.
RE: Dropbox 'deceived' users over security: Files are open to government searches
Hooray for CSC!
Like Dropbox, but more secure and as much space as I can afford at the moment XD
Only a sap would trust the cloud
Well said
RE: Dropbox 'deceived' users over security: Files are open to government searches
RE: Dropbox 'deceived' users over security: Files are open to government searches
The image used in the article of a TrueCrypt volume inside Dropbox is a recipe for disaster. A TrueCrypt volume contains an entire file system inside. If you use Dropbox on more than one computer, you have to make sure you unmount the TrueCrypt volume every time you switch to another computer. You can't use any file in the volume until you've unmounted the volume in the other computer.
Another online backup service that promises security is SpiderOak. You generate the password locally and it is never sent to them, which means they never have access to your data.