{"id":143,"date":"2011-07-04T13:13:00","date_gmt":"2011-07-04T17:13:00","guid":{"rendered":"http:\/\/irreal.org\/blog\/?p=143"},"modified":"2011-12-27T13:25:51","modified_gmt":"2011-12-27T18:25:51","slug":"more-dropbox-silliness","status":"publish","type":"post","link":"https:\/\/irreal.org\/blog\/?p=143","title":{"rendered":"More Dropbox Silliness"},"content":{"rendered":"\n<p>I&#8217;ve written about Dropbox a <a href=\"http:\/\/irreal.org\/blog\/?p=23\">couple<\/a> of times <a href=\"http:\/\/irreal.org\/blog\/?p=134\">before<\/a> in a generally positive way. In this post, I&#8217;m coming to their defense again so I should state for the record that I&#8217;m neither a Dropbox user nor associated with them in any way. The latest silliness involving Dropbox is concern over their new <a href=\"https:\/\/www.dropbox.com\/terms\">Terms of Service<\/a>. A number of people have pointed to the section entitled <b>Your Stuff &amp; Your Privacy<\/b>. Here&#8217;s how the story on <a href=\"http:\/\/hardware.slashdot.org\/story\/11\/07\/02\/0515218\/Dropbox-TOS-Includes-Broad-Copyright-License\">Slashdot<\/a> reported the new language: <\/p>\n<blockquote>\n<p>By submitting your stuff to the Services, you grant us (and those we<br \/>\nwork with to provide the Services) worldwide, non-exclusive,<br \/>\nroyalty-free, sublicenseable rights to use, copy, distribute, prepare<br \/>\nderivative works (such as translations or format conversions) of,<br \/>\nperform, or publicly display that stuff to the extent we think it<br \/>\nnecessary for the Service.\n<\/p>\n<\/blockquote>\n<p> That sounds pretty bad, doesn&#8217;t it? Dropbox appears to be saying that they can do anything they want with any data you store on the system. But when you add a little context <\/p>\n<blockquote>\n<p>By using our Services you may give us access to your information,<br \/>\nfiles, and folders (together, \u201cyour stuff\u201d). You retain ownership to<br \/>\nyour stuff. You are also solely responsible for your conduct, the<br \/>\ncontent of your files and folders, and your communications with others<br \/>\nwhile using the Services.\n<\/p>\n<p>\nWe sometimes need your permission to do what you ask us to do with<br \/>\nyour stuff (for example, hosting, making public, or sharing your<br \/>\nfiles). By submitting your stuff to the Services, you grant us (and<br \/>\nthose we work with to provide the Services) worldwide, non-exclusive,<br \/>\nroyalty-free, sublicenseable rights to use, copy, distribute, prepare<br \/>\nderivative works (such as translations or format conversions) of,<br \/>\nperform, or publicly display that stuff to the extent reasonably<br \/>\nnecessary for the Service. This license is solely to enable us to<br \/>\ntechnically administer, display, and operate the Services. You must<br \/>\nensure you have the rights you need to grant us that permission.\n<\/p>\n<\/blockquote>\n<p> you see that what the terms really say is that if you want Dropbox to provide certain services, such as sharing your data, you have to give them the right to do it. No <i>All your data are belong to us<\/i>, merely protection from lawsuits for using your data in some way that you asked them to. <\/p>\n<p> As a result of the brouhaha over the Terms of Service, Dropbox added an <a href=\"http:\/\/blog.dropbox.com\/?p=846&amp;updated\">update<\/a> on their <a href=\"http:\/\/blog.dropbox.com\/\">blog<\/a> in which they explicitly say that they don&#8217;t own your data and that the license allows them to provide the service that you are requesting and nothing else. As the folks over at the <a href=\"http:\/\/blog.agilebits.com\/2011\/07\/dropbox-terms\/\">Agile Blog<\/a> (the makers of 1password) say &ldquo;Read the policy, not the tweets.&rdquo; <\/p>\n<p> It&#8217;s bad enough when the kids over at Slashdot hyperventilate over a faux issue like this but <a href=\"http:\/\/jdsawyer.net\/2011\/07\/02\/put-it-in-the-cloud-are-you-nuts\/\">others<\/a> who might be expected to take a more measured view are also upset. Even <a href=\"http:\/\/www.zdnet.com\/blog\/projectfailures\/convenience-over-privacy-is-dropbox-watching-you\/13706?tag=mantle_skin;content\">Michael Krigsman<\/a> over at ZDNet is jumping in recommending that Enterprises &ldquo;&hellip;discontinue use of the product for applications where privacy and confidentiality are mission critical.&rdquo; <\/p>\n<p> Let me say it <a href=\"http:\/\/irreal.org\/blog\/?p=134\">again<\/a>: If you are storing sensitive information in the cloud and you don&#8217;t encrypt it then <i>you<\/i>, not the cloud provider, are guilty of negligence if that data is compromised. Krigsman is right; You shouldn&#8217;t be storing unencrypted mission critical data in the cloud but that has nothing to do with the Dropbox Terms of Service; it&#8217;s a matter of common sense and due diligence. <\/p>\n<p> <b>Update<\/b>: Dropbox has <a href=\"http:\/\/blog.dropbox.com\/?p=867\">once again<\/a> updated their Terms of Service in an  attempt to assure everyone that they have no interest in owning or  using your data in any way that doesn&#8217;t involve providing the  services that you ask for. It <i>should<\/i> put this silliness to rest once  and for all but it probably won&#8217;t. <\/p>\n","protected":false},"excerpt":{"rendered":"<p>I&#8217;ve written about Dropbox a couple of times before in a generally positive way. In this post, I&#8217;m coming to their defense again so I should state for the record that I&#8217;m neither a Dropbox user nor associated with them &hellip; <a href=\"https:\/\/irreal.org\/blog\/?p=143\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[],"class_list":["post-143","post","type-post","status-publish","format-standard","hentry","category-general"],"_links":{"self":[{"href":"https:\/\/irreal.org\/blog\/index.php?rest_route=\/wp\/v2\/posts\/143","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/irreal.org\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/irreal.org\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/irreal.org\/blog\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/irreal.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=143"}],"version-history":[{"count":2,"href":"https:\/\/irreal.org\/blog\/index.php?rest_route=\/wp\/v2\/posts\/143\/revisions"}],"predecessor-version":[{"id":544,"href":"https:\/\/irreal.org\/blog\/index.php?rest_route=\/wp\/v2\/posts\/143\/revisions\/544"}],"wp:attachment":[{"href":"https:\/\/irreal.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=143"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/irreal.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=143"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/irreal.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=143"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}