←back to thread

How Dropbox Hacks Your Mac

(applehelpwriter.com)
1037 points 8bitben | 9 comments | | HN request time: 0.211s | source | bottom
Show context
newhouseb ◴[] No.12464730[source]
Hi HN — Ben from Dropbox here on the desktop client team. Wanted to clarify a few things —

- Clearly we need to do a better job communicating about Dropbox’s OS integration. We ask for permissions once but don’t describe what we’re doing or why. We’ll fix that.

- We only ask for privileges we actively use -- but unfortunately some of the permissions aren’t as granular as we would like.

- We use accessibility APIs for the Dropbox badge (Office integrations) and other integrations (finding windows & other UI interactions).

- We use elevated access for where the built-in FS APIs come up short. We've been working with Apple to eliminate this dependency and we should have what we need soon.

- We never see or store your admin password. The dialog box you see is a native OS X API (i.e. made by Apple).

- We check and set privileges on startup — the intent was to make sure Dropbox is functioning properly, works across OS updates, etc. The intent was never to frustrate people or override their choices.

We’re all jumping on this. We’ll do a better job here and we’re sorry for any anger, frustration or confusion we’ve caused.

replies(30): >>12464748 #>>12464757 #>>12464795 #>>12464842 #>>12464871 #>>12464901 #>>12464973 #>>12464992 #>>12465003 #>>12465065 #>>12465178 #>>12465579 #>>12465584 #>>12465819 #>>12465975 #>>12466068 #>>12466126 #>>12466141 #>>12466143 #>>12466315 #>>12466502 #>>12466626 #>>12466822 #>>12468525 #>>12468769 #>>12468833 #>>12469145 #>>12470515 #>>12473045 #>>12481821 #
1. riobard ◴[] No.12465003[source]
At this point you need to follow up with convincing technical details of why Dropbox needs the circumvention to counter the accusation and rebuild the damaged trust.

The reason for needing Accessibility API listed in your response is pretty vague, especially for those Mac users not having Microsoft products tainting their systems.

I've deleted Dropbox from my Mac for now. I'm not installing it back till there's reasonable explanation and remedies.

replies(3): >>12465051 #>>12465612 #>>12465733 #
2. ch4s3 ◴[] No.12465051[source]
I agree with you general sentiment, but would Word or Excel really "taint" your system?
replies(2): >>12465168 #>>12473517 #
3. techer ◴[] No.12465168[source]
Morally?
replies(1): >>12466775 #
4. pilif ◴[] No.12465733[source]
> why Dropbox needs the circumvention

I'm not affiliated with Dropbox, but compare the UX of Dropbox (type in your admin-password and that's it) with the one of Steam (opens the System preferences and forces you to make manual changes). Both need to be allowed accessibility access for one feature or another, but only one of them provides convincing UX.

For us power users, the "official" way is better, sure, but what's the percentage of power-users compared to normal users who actually enjoy the office intrgration and other things made possible by the accessibility API?

I would be happiest if it didn't do the dirty thing and also didn't offer office integration. Maybe that's the change they need to make. But if they insist on doing the things that need accessibility, then the current solution is so much more convenient than the steam dance.

replies(1): >>12467482 #
5. ch4s3 ◴[] No.12466775{3}[source]
Vs. Apple? That seems thin...
replies(2): >>12467198 #>>12468533 #
6. 4ad ◴[] No.12467198{4}[source]
Not everyone shares your same sense of morality.
7. redial ◴[] No.12467482[source]
Doing it is only part of of it. Doing it behind users back without a message or warning, or a even an article on their website is the biggest problem.
8. jedikv ◴[] No.12468533{4}[source]
Fanboys be blind to the hypocrisy and all that jazz...
9. JadeNB ◴[] No.12473517[source]
I can't stand the `~/Documents/"Microsoft User Data"` folder, but that's what I get any time I open an Office app.