Dropbox removed ability to opt your files out of AI training::undefined
Why does dropbox have the ability to see your files at all? That seems like a pretty bad security flaw in the first place.
There are drawbacks to end-to-end encryption (E2EE). I’m not aware of any E2EE cloud storage systems that have the features Dropbox provides. I would LOVE to know of any that…
-
Support at least the big 5 platforms (Android/iOS/Mac/Windows/Linux).
-
Have a functional web interface.
-
Support sharing and collaboration.
-
Have a search feature
-
Sync to the local filesystem on a folder-by-folder or even file-by-file basis
-
Integrate with other tools (e.g. android file picker)
It’s not easy to do all that with E2EE, like a functional web interface, search, and integration.
ProtonMail’s search, for example, is limited to subject and metadata, and that’s specifically because they DON’T use E2EE for that.
I’m willing to compromise some of this for the sake of E2EE, but I’m not at all surprised that feature-first services are more popular than privacy-first services.
You will probably have tradeoffs. And somehow need to script accept that at some point, you need to trust someone. At the very least with firmware. And you probably need to change workflow.
I find cryptpadb works almost as well as Google docs did a few years ago.
1: easy to port E2EE, it’s just math
2: browsers and E2EE is hard, you need an extension to implement it securely so the password can’t be made accessible directly to the server (you need it to remain secret even from the hosting company) or else you’re dealing with MITM risk
3: easy by sharing encryption keys using E2EE messaging protocols on top
4: encrypted search is a thing, but such indexes does tend to have some limitations
5: still easy
6: still easy, Android specifically have APIs to let apps register themselves to the file picker so they can transparently encrypt and decrypt files. But yes on other systems where 3rd party apps can’t offer such integration then it’s hard
I’ve seen one called Skiff that’s trying to do most of these things
Mega uses e2ee and is available in all platforms I use. I don’t use apple. Web interface is very functional. I think it does support sharing files via link. Should have a search feature also, never used (because I know exactly where I keep my files). It does sync with locals. I don’t know about android file picker.
Mega is not a good choice for Lemmy users or Foss activists, probably because of its history - which is not as clean as say next cloud, but is not like google either. As long as it works :/
-
Man wait til you hear about Gmail
Email is like the one critical part a lot of people miss when talking about taking control of your data. Imagine how much could be gleaned out of email history? Where you go, what you do, who you talk with, what you buy, what you rent, what media you consume, everything. If you dont have a lot of friends someone with your email account could pretty much just doppelganger you and go on as if nothings happened.
I HATE Dropbox.
I tried to use them recently and their service had some problems.
They have an option to “stream” files when you need them. The only problem is you need an internet connection to access them. I did not trust this kind of system and I actually need to access my files even without internet.
So there is a way to make the files available offline. Great! Problem solves. NOPE! They offer an option to have your files available offline, but they might remove the files and make them only available in the cloud if you local storage gets low.
That is really all they say about it and there is no option to turn this off. I was uncomfortable about their vagueness and my inability to disable this.
Within 24 hours of paying for their service I learned of this and they refused to refund my purchase.
PLEASE NEVER WORK WITH DROPBOX
I’ve had a great experience with Dropbox (for about 10 years!), but I also used their Linux client which is old and very straightforward. Now I’m a Nextcloud user, and I wish it worked as well as Dropbox did. But with this AI thing I’m not switching back.
it was painful to migrate from dropbox. their api is shit and does nothing to guarantee delivery. i had to split folders into 5gb chunks and download everything in zip files through the browser. it took a year. what an awful company.
Why not use something like rclone to download your stuff?
I tried several third-party tools and all of them had the same problems with the API
I’ll never work with them again and actively. Advocate against them.
I’ve used Dropbox since literally their first year of creation and I’ve never experienced a single one of these issues. I use it mostly as a portable library and all I need is 2 mins of any WiFi connection to download any book(s) I want to read to a local device. Mind you this is on their free plan, so I’ve never paid a cent to them either. Requires me to periodically transfer older books to another long term solution, but that is just a few mouse clicks. I’ve read hundreds if not more ebooks this way. Since I prefer .mobi (which I can even read IN dropbox if I want) I can upload straight to dropbox after converting from .epub.
I mean, it sounds frustrating, but your experience with them sounds extremely weird to me.
At least to me they’ve been the best cloud provider by far, for what it’s worth.
With that said, I don’t especially like that they’re doing this even though my specific content is mostly available in any number of places anyway, given that it’s literature.
Instructions unclear
Uploading various types of Nightshade to DropBox.
EDIT: I see a couple downvotes so I thought I would explain: Nightshade was developed as a way to poison or corrupt AI Generative Tools. Basically by uploading Nightshade I’m harming their results.
You can still opt out by opting not to use Dropbox.
This is the sensible option. Fuck them.
Just encry client side before upload
Why bother? It’s much less work to just switch to a noon shitty service…
Now I feel tempted to make a Dropbox account and fill it with gigabytes of noise data…
Lol
Time for dropbox users to upload all kinds of crap for ai to “learn” from, all within tos of course.
I bet there are many kinds of ways to make your files poison the ai learning data. Its going to be fun for those ai guys to sort which files are probably safe and which are not. I think even if ONE user manages to slip something that corrupts the training data and its not noticed soon enough it might cause problems for them. Though someone who actually knows something about the subject might want to tell if i’m talking shit or not.
I’m not against ai in general, but if its trained with data that was obtained from unwilling people, like this, then its makers can fuck off.
It really depends on what the AI training is looking for. You can potentially poison an AI training model, but you’ll likely have to add enough data to be statistically relevant.
enough data as in many different people will have to upload one or two files that contain such data or you have to upload very large file that contains a lot of data that causes problems?
It’s honestly difficult for me to say because there are so many different ways to train AI. It really depends more on what the trainers configure to be a data point. Volume of files vs size of a single file aren’t as important as what the AI believes is a data point and how the data points are weighted.
Just as a simple example, a data point may be considered a row on a spreadsheet without regard for how that data was split up across files. So ten files with 5 rows each might have the same weight as one file with 50 rows. But there’s also a penalty concept in some models, so the trainer can set it so that data that all comes from one file may be penalized. Or the opposite could be true if data coming from the same file is deemed to be more important in some way.
In terms of how AIs make their decisions, that can also vary. But generally speaking, if 1000 pieces of data are used that are all similar in some way and one of them is somewhat different from the others, it is less likely that that one-off data will be used. It’s much more likely to have an effect If 100 of the 1000 pieces of data have that same information. There’s always the possibility of using that 1/1000 data, it’s just less likely to have a noticeable effect.
AIs build confidence in responses based on how much a concept is reinforced, so you’d have to know something about the training algorithm to be able to intentionally impact the results.
thank you, this was the kind of information i was hoping for
If someone has a way to poison their AI training by adding junk along my regular files I’m interested. Sadly I use it at work and I cannot decide to migrate to another cloud so I better sabotage them
There’s probably lots of ways, look up adversarial samples in machine learning and poisoning attacks
https://christophm.github.io/interpretable-ml-book/adversarial.html
https://www.computer.org/csdl/magazine/co/2022/11/09928202/1HJuFNlUxQQ
Thank you for your contribution, I was referring to a practical way (script, binary, …) to achieve this not academic literature, I don’t have much time to invest in this and my IT level is insufficient
Any specific tools will require knowledge of the system you’re targeting, so I don’t expect to see many public ML poisoning tools targeting anything but open source ML libraries, but adversarial sample tools to fool classifiers (including repainting stuff like those face transformation filters) might get more common because it’s much much easier to test
Create a lot of text files filled with offensive and false information. Maybe 4chan and OANN transcripts :)
It will always be a cat-and-mouse game. Once the trainers recognize the attack, they can use the attack to further improve their models. A long time ago I watched a speech from a guy who worked on Yahoo! Mail’s spam detection. They realized spammers would create email accounts, send spam to them, then have the accounts mark their spam as “not spam.” They came up with a method to automatically identify these accounts, and used them to further improve their spam detection model (if these accounts marked something as “not spam” it was likely spam).
Thanks I forgot I even had a dropbox account. And everything is deleted files and account.
Check for old shares. I had EVERYTHING deleted, from files, recycled bin…For nearly a decade already. BUT. Today I just found there were old shares of those deleted files. I clicked to delete the shares too. Guess what, the files were back onto the dropbox folder as if they never were deleted a decade ago! So I had to delete them again, and then from the recycle bin. And then deleted the account.
This situation is so ridiculous
Guess I need to find and close that account now
Apparently Proton has a drive service now…
I have my dick pics in there wtf is AI going to learn
What hotdogs look like, obviously
The latest stable diffusion base model will be trained 100% on Dropbox dick pics. Your dick’s likeness will be merged with that of thousands of other dicks and will be used to generate semi-realistic dick imagery.
So if I don’t opt out can I force the AI to train on my files?
Wait, Dropbox can use your files to train AI? How is this acceptable? Aren’t people storing their keepass vaults there?
You better have created a Keyfile with it and store that only locally on your devices, otherwise if your passwords get leaked or you get hacked it is 100% your fault and not Dropbox’s fault.
But what about files and documents containing PII? It’s not ok to use them for AI training.
Closing my Dropbox account now.
Wnat are you going to?
Wow! Never used Dropbox but wonder if google drive is doing the same ? 🤔
