Dear @EU_Commission,
A US company has backdoored countless computers belonging to EU citizens. Your response?http://applehelpwriter.com/2016/08/29/discovering-how-dropbox-hacks-your-mac/ …
-
-
Which US corporation has a former National Security Advisor & Secretary of State on its board & the root passwords of countless EU citizens?
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
(Of course all that pales in comparison to the fact that we *willingly* give them all our files to look through.)https://twitter.com/aral/status/774507034041548800 …
-
I am not sure why anyone would ever trust
@dropbox given they were on the#prism list.@SpiderOak is what I recommend.#privacy -
do let me know if you find similar behaviour with
@SpiderOak - I am curious now. -
Can’t see why they would; it would be business suicide. (Haven’t used them; on my ever-growing todo list.)
End of conversation
New conversation -
-
-
It does not phish any passwords. It uses the standard OS X authorization APIs with a custom prompt https://developer.apple.com/library/mac/documentation/Security/Reference/authorization_ref/index.html#//apple_ref/doc/constant_group/Name_Tags …
-
Link to source?
-
It's easy to prove Dropbox is using a standard OS X authorization dialog by sampling the process when showing.
@aralpic.twitter.com/RSM1jhNv09
-
If you look at the documentation for AuthorizationCopyRights(), it shows you can change the prompt and icon.
@aral https://developer.apple.com/library/mac/documentation/Security/Reference/authorization_ref/#//apple_ref/c/func/AuthorizationCopyRights … -
AuthorizationCopyRights() blocks all threads in the caller and then uses IPC (XPC) to call out to SecurityAgent to show the dialog.
@aral -
So that's: Show password dialog Open /Applications/Utilities/Activity Monitor Double-click Dropbox Click "Sample" Find thread…
@aral -
If you want to force the Authorization dialog to appear again: quit Dropbox, delete /Library/DropboxHelperTools/, relaunch Dropbox
@aral -
The thing to be worried about is that Dropbox now installs a kernel extension (kext)… https://developer.apple.com/library/mac/documentation/Darwin/Conceptual/KernelProgramming/Extend/Extend.html …
- 4 more replies
New conversation -
-
-
@romeroabelleira the dialog is shown by the OS. The password never goes to them. This is no different than using sudo -
Did you read the article?
-
yes. It’s inaccurate. Info from Dropbox here https://news.ycombinator.com/item?id=12464730 … and experiments of minehttps://lobste.rs/s/bzsqge/revealing_dropbox_s_dirty_little/comments/gmtcs9#c_gmtcs9 …
End of conversation
New conversation -
-
-
. Oh well. The public was advised two years ago against using Dropbox. .
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
@YourAnonNews ow@zehf, acho q foi uma boa vc ter mudado mesmo hahahaThanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
@YourAnonNews good to know lolThanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.