Dropbox Accesses Every File on Your Computer

Not just those in the sync folder

#Privacy

Tue, Mar 3rd, 2015 10:00 by capnasty NEWS

According to E-Siber, Dropbox appears to access and send back information on every file on your computer — not just those in the sync folder — and does so without users' permission or consent.

[...] Dropbox syncs not only its own folder but also everything in local drive (C:) without any user consent or permission. I caught it red-handed while working with my DLP (data loss prevention) endpoint agent that I adjust DLP system to work properly on production environment.

However, according to information security researcher Darren P. Meyer, this might not be the case:

The Dropbox application uses a filesystem monitor to detect when changes are made by monitoring filesystem write events. This is, by necessity, a system-wide process. So DLP alerting that Dropbox is “acccessing” a new file shouldn’t be surprising.

Likewise, the Dropbox application routinely communicates with its sync infrastructure at Dropbox and AWS endpoints, so it’s not surprising to see Dropbox communicating regularly to check whether there is a new sync point or the like.

  1820

 

You may also be interested in:

In an Era of Mass Surveillance, Technology Companies are Responding to the Demands of their Customers
UK Open Rights Group Raising Money to Take Government to Court Over Surveillance
“Session replay scripts collect can’t reasonably be expected to be kept anonymous.”
Portable Operating System that Preserves Privacy and Anonymity
"It’s increasingly hard to opt-out of online tracking."