You might see that the Dropbox Community team have been busy working on some major updates to the Community itself! So, here is some info on what’s changed, what’s staying the same and what you can expect from the Dropbox Community overall.
Forum Discussion
How secure is Paper?
Anyone that has my url can view my notes without any credential.... If someone takes a picture of my screen or anotate my url can acesss my notes directly in any computer and all the links that i...
Someone from the drobox support explained me that you need to specify that only people invited to this doc can view the link, on the document sharing properties; this blocks the default behavior of leaving the link accessible by anyone with it.
This works but is annoying since you need to specify this in all documents that you create.
Ideally, the system should have an option to set this as the default behavior to all documents or something in this line.
More information visit https://www.dropbox.com/help/paper/sharing-permissions
Thanks….
Hello, could you do a test...
Try to open this link:
https://paper.dropbox.com/doc/donotopen-yrBVHQJq2S7jQDx2qBaC9
If what you said is truth, you should not be able to open it...
But looks like this link is acessible for everyone with it!!!!! I testd using a proxy...
Mark
Super User II
Super User III stand corrected, something has changed and it is saying I can access it BUT I need an account to view the document and you are informed that I am viewing it.
I'm going to do some digging....
Looks like that the URL comes with an auto-shareable code.
This is dangerous, is like having your password in the URL, and there are various forms to get it (taking pictures, filming, looking at it!...).
To you dropbox showed a button to open it “Open doc” but I think it showed this button because you have a dropbox account, if you test this link using a proxy or torbrowser where dropbox does not knows you it shows the document directly…
If this is a default behavior of dropbox I think it is insecure, mainly because I like to connect my papers with links (+doc1 +doc2), so if someone gets the url from my “index” they could have access to all my linked docs!
Thanks
Someone from the drobox support explained me that you need to specify that only people invited to this doc can view the link, on the document sharing properties; this blocks the default behavior of leaving the link accessible by anyone with it.
This works but is annoying since you need to specify this in all documents that you create.
Ideally, the system should have an option to set this as the default behavior to all documents or something in this line.
More information visit https://www.dropbox.com/help/paper/sharing-permissions
Thanks….
I just verified that even an "invite only" folder by default will make all docs inside world-readable.
Nice to see people finally admit this is the case so frustrating that so many people on these forums just argued with folks with no evidence. Is Dropbox the new Apple? :)
Back to Google Docs for me...
