This is a staging forum for AgileBits, not an official support forum. Visit http://discussions.agilebits.com instead.

DropBox insecurity

<div class="IPBDescription">What can prying eyes see?</div>Given that there are recent FTC allegations that DropBox's claims of privacy file securirty are untrue, what steps should be taken by users to guard the privacy of the 1Password data synchronized through DropBox?

-shs-

Comments

  • [quote name='-shs-' timestamp='1305574376' post='27125']

    Given that there are recent FTC allegations that DropBox's claims of privacy file securirty are untrue, what steps should be taken by users to guard the privacy of the 1Password data synchronized through DropBox?

    -shs-

    [/quote]



    -shs-,



    I responded to a similar inquiry in another Forum: [url="http://forum.agile.ws/index.php?/topic/4771-dropbox-changes-security-claims/page__view__findpost__p__27133"]Dropbox Changes Security Claims[/url]



    Please take a look and let me know if my response is relevant to your current question. If not, please let me know.



    Thanks.



    Brandt
  • Brandt,

    Thank you for the response. I can’t get the link to connect, but I’ll search for the post by its name.

    -shs-
  • [Deleted User]
    edited May 2011
    [quote name='-shs-' timestamp='1305606953' post='27159']

    Brandt,

    Thank you for the response. I can’t get the link to connect, but I’ll search for the post by its name.

    -shs-

    [/quote]



    -shs-,





    Sorry about that. It appears the linked thread above was merged with the other thread that I referred to in the original post.



    [url="http://forum.agile.ws/index.php?/topic/4451-security-dropbox-authentication/page__view__findpost__p__27133"]Check here[/url]





    Brandt



    (Did that make sense? I think I just confused myself! <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/smile.gif' class='bbc_emoticon' alt=':)' />)
  • Got it! I was starting to doubt my search skills...

    Thanks so much for the information.

    -shs-
  • Brandt,

    Excellent links and information. It’s quite a debate, and one that I’m now starting to understand, with your help.

    Ah, the joys of a strong password...

    Thanks,

    -shs-



    [quote name='-shs-' timestamp='1305607798' post='27162']

    Got it! I was starting to doubt my search skills...

    Thanks so much for the information.

    -shs-

    [/quote]
  • [quote name='-shs-' timestamp='1305608182' post='27163']

    Brandt,

    Excellent links and information. It’s quite a debate, and one that I’m now starting to understand, with your help.

    Ah, the joys of a strong password...

    Thanks,

    -shs-

    [/quote]



    You are most welcome! I am glad the links were helpful. Trust me, you are not alone with your concerns about the recent Dropbox news stories.



    The joys of a strong password cannot be underestimated. To ensure your password is really strong, you may wish to review the latest and greatest password testing platform: [url="http://forum.agile.ws/index.php?/topic/1774-choosing-a-good-master-password/page__view__findpost__p__27142"]So you think you have a strong password?[/url]



    Enjoy!
  • GeneY
    GeneY AWS Team
    Hello everyone,



    You raised a very important question about Dropbox security issues and how it may affect 1Password for Android (and other Agile applications too).

    We at Agile is carefully reviewing every bit of information regarding them, so the issue hasn't got unnoticed by any means.



    As you probably know, Agile 1Password keychain (the place where all your private information is stored) is encrypted and getting an unwanted access to it doesn't compromise

    security. Your Master Password is everything what is required in order to open your keychain and once it is reasonably long and kept in a secure place, it is impossible to break your keychain.



    However, here at Agile we currently make a very serious change to all Agile products and introducing a new keychain format. In this format there will be no low/high security options, all items

    will be encrypted with high security only.In addition, every single bit of information,( even metadata (data about data) which is usually not required to be encrypted) will be encrypted.



    This new data format is currently in a Beta testing mode. Of course,1Password for Android,will have a support for the new format too, as well as all Agile applications.



    By the way, the new release of 1Password for Android is coming up in the next few days, so please stay tuned for the updates.



    Best regards,

    Gene

    Android developer



    [quote name='bswins' timestamp='1305610446' post='27165']

    You are most welcome! I am glad the links were helpful. Trust me, you are not alone with your concerns about the recent Dropbox news stories.



    The joys of a strong password cannot be underestimated. To ensure your password is really strong, you may wish to review the latest and greatest password testing platform: [url="http://forum.agile.ws/index.php?/topic/1774-choosing-a-good-master-password/page__view__findpost__p__27142"]So you think you have a strong password?[/url]



    Enjoy!

    [/quote]
  • Thanks Gene!



    I can't wait to introduce my mother to the new Android app. I'll probably have a lot of questions for you!



    Brandt
  • GeneY
    GeneY AWS Team
    edited May 2011
    Hi Brandt,



    You are very welcome,



    Feel free to send us your questions suggestions and recommendations regarding 1Password for Android and other

    Agile products. Our customer representatives and myself will do our best to provide detailed answers to all your questions.



    Best regards

    Gene <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/rolleyes.gif' class='bbc_emoticon' alt=':rolleyes:' />



    [quote name='bswins' timestamp='1305942549' post='27482']

    Thanks Gene!



    I can't wait to introduce my mother to the new Android app. I'll probably have a lot of questions for you!



    Brandt

    [/quote]