Edited the title to what the article has now.

  • Showroom7561@lemmy.ca
    link
    fedilink
    English
    arrow-up
    94
    arrow-down
    4
    ·
    edit-2
    11 months ago

    … enabled-by-default

    shares your Dropbox data with OpenAI …

    … an experimental AI-powered search feature. …

    … user data [IS] shared with third-party AI partners…

    This would be more than enough reason for me to cancel and delete my account if I were still a customer.

    If you can’t trust a company with your data, then you can’t trust the company at all.

    Why do companies have to be so opaque with things? If they really wanted users to try some experimental, data-sharing feature, offer it to them as an opt-in beta feature and pay them for being a guinea pig.

    Consent with compensation is way better than non-consent with zero transparency.

    • Otter@lemmy.ca
      link
      fedilink
      English
      arrow-up
      27
      ·
      11 months ago

      This should be justification enough for any enterprise company using Dropbox to dump them overboard

    • time_fo_that@lemmy.world
      link
      fedilink
      English
      arrow-up
      11
      ·
      edit-2
      11 months ago

      Fuck. I have been using them for backup for years, I currently have everything on my NAS but still like having important stuff in an offsite backup.

      Anyone know a reasonably priced cloud storage provider that has integration (either 3rd or 1st party) with Unraid?

      Edit: Dropbox just renewed my annual subscription last night at midnight 🙃

      Double edit: I went into my Dropbox web portal and found that the setting was enabled by default for me. I’m in the US.

      • Hexarei@programming.dev
        link
        fedilink
        English
        arrow-up
        4
        ·
        11 months ago

        I use wasabi, it’s an Amazon s3 compatible storage solution, $5/month/TB with no network or access fees

        • time_fo_that@lemmy.world
          link
          fedilink
          English
          arrow-up
          1
          ·
          edit-2
          11 months ago

          Oh that’s not bad! Thanks I’ll look into it. What are you using to send the backups to Wasabi?

          • Hexarei@programming.dev
            link
            fedilink
            English
            arrow-up
            1
            ·
            edit-2
            11 months ago

            I run my NAS on TrueNAS, and it just has a built-in solution for taking ZFS snapshots, encrypting them, and shipping them to an S3-compatible storage.

            However, for unraid, I think your easiest thing will be to use the rclone plugin

      • PorkSoda@lemmy.world
        link
        fedilink
        English
        arrow-up
        4
        ·
        11 months ago

        I use Unraid too. What app are you using for backup? Most allow for encrypted backups which renders this issue moot (though still shitty).

        I use Duplicacy (not to be confused with the unreliable Duplicati) and send encrypted backups to B2 Backblaze.

        • time_fo_that@lemmy.world
          link
          fedilink
          English
          arrow-up
          1
          ·
          11 months ago

          I’m actually not backing up my NAS at the moment. It’s been on my to do list for a while to figure out a solution.

          How much does Backblaze run you per month? I’ve got ~2tb stored currently.

      • willis936@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        ·
        edit-2
        11 months ago

        I had good luck with B2 backblaze but recently switched to storj for E2EE backups without having encrypted filenames in the browser. Overall these solutions are slower and more expensive than typical cloud backups, but it’s well worth it to stick it to the man.

        Edit: more expensive, not cheaper.

          • willis936@lemmy.world
            link
            fedilink
            English
            arrow-up
            1
            ·
            11 months ago

            TrueNAS Scale has a built-in cloud backup tool that supports the common sites and protocols. Most all NAS solutions have something similar. It’s really just an rsync wrapper with authentication and storage protocol support.

    • MeatsOfRage@lemmy.world
      link
      fedilink
      English
      arrow-up
      7
      ·
      11 months ago

      There’s a lot of missing context with those ellipsis. Enabled by default means you’re just going to see the feature but it’s not doing anything or sending any data until you interact with it. Even when you do it prompts you first to explain what it’s going to do. If you don’t want to see the feature at all you can just toggle it back off but no data has moved until you’ve consented to it.

      • Showroom7561@lemmy.ca
        link
        fedilink
        English
        arrow-up
        5
        arrow-down
        2
        ·
        11 months ago

        Yes, a fair point that was mentioned in the article.

        I may be speaking only for myself, but I don’t want any new features enabled by default. Subsequent popups and warnings may be hastily ignored/skipped during a user’s busy day, so it’s too easy to accidentally give consent, and consent shouldn’t be accidental.

        Let users know about the feature in a newsletter or “what’s new” section of the site, and let the user opt-in to try this new feature (if they wish). That’s really the only ethical, transparent, and 100% way to ensure consent.

    • Potatos_are_not_friends@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      arrow-down
      1
      ·
      11 months ago

      They made some seriously bad choices in the past few years that I honestly don’t believe they can survive by 2030. Just like photobucket and vimeo, Dropbox has reached peak shit.

      I already moved anything sensitive out of my pro account, switched to free, and now use it to store memes and porn since that realization.

  • MeatsOfRage@lemmy.world
    link
    fedilink
    English
    arrow-up
    94
    arrow-down
    7
    ·
    edit-2
    11 months ago

    Holy hell guys, did you all just read the headline and run to the comment section?

    • enabled by default means you can see the feature and interact with it if you choose to do so

    • when you interact with it, it explains it needs to send this file to OpenAI. Of course it does, that’s how it knows what you’re asking of it. You are prompted to choose to use this feature

    • if you choose not to interact with it, nothing has changed, nothing has been sent anywhere

    • if you really don’t want to look at it anymore you can turn it off, which is nice. A lot of companies drop stuff like this and you’re stuck with it whether you like it or not

    • Dr. Moose@lemmy.world
      link
      fedilink
      English
      arrow-up
      12
      arrow-down
      1
      ·
      11 months ago

      when you interact with it, it explains it needs to send this file to OpenAI

      /thread

    • Dizzy Devil Ducky@lemm.ee
      link
      fedilink
      English
      arrow-up
      13
      arrow-down
      3
      ·
      11 months ago

      What? You expect people to actually read articles instead of jumping to conclusions based solely on the headlines? Outrageous

      /s

    • lolcatnip@reddthat.com
      link
      fedilink
      English
      arrow-up
      8
      arrow-down
      2
      ·
      11 months ago

      The more I read this community the more I think it’s populated mainly by children and pearl-clutching conspiracy theorists.

        • frunch@lemmy.world
          link
          fedilink
          English
          arrow-up
          5
          arrow-down
          1
          ·
          11 months ago

          No, this place is much better–we have you here! 😀 Thanks for commenting and adding to the discourse ✨

  • grue@lemmy.world
    link
    fedilink
    English
    arrow-up
    48
    arrow-down
    9
    ·
    11 months ago

    ITT: not nearly enough people demanding that Dropbox execs go to prison for massive violations of the Computer Fraud and Abuse Act.

    • JohnEdwa@sopuli.xyz
      link
      fedilink
      English
      arrow-up
      19
      ·
      edit-2
      11 months ago

      Not nearly enough people have read the article and instead make rash decisions based on a misleading clickbait headline that has since been changed to "Dropbox spooks users with new AI features that send data to OpenAI when used "

      Specifically asking the AI search tool to analyze a file for you kinda requires sending that file to OpenAI to be analyzed. And it even asks you if it’s okay first.

    • radix@lemmy.world
      link
      fedilink
      English
      arrow-up
      21
      ·
      11 months ago

      It’s not in any of the articles, but in dropbox forums:

      The Third-Party AI features are not available to everyone yet. The features are in alpha and are only available to customers on Dropbox Professional, Essentials, Business, Business Plus, and some customers on Dropbox Standard and Advanced.

      If you’re on a Basic, Plus or Family account, or you’re part of one of the other groups that don’t yet have access, the Third-Party AI features won’t be available to you.

      • paraphrand@lemmy.world
        link
        fedilink
        English
        arrow-up
        17
        ·
        11 months ago

        Cool, so we have to just keep thinking about it and checking in to turn it off. Great way to combat a wave of people opting out.

        • cyd@lemmy.world
          link
          fedilink
          English
          arrow-up
          8
          ·
          11 months ago

          By the time it appears, it will have been “on” for some nonzero duration before you switch it off, so I guess they could already have irreversibly vacuumed up your existing data…

      • Potatos_are_not_friends@lemmy.world
        link
        fedilink
        English
        arrow-up
        5
        ·
        11 months ago

        Yikes.

        Prayers to all the companies using Dropbox as cloud storage.

        Your intellectual property and private docs is now given to AI! Haha y’all are so fucked!

    • treefrog@lemm.ee
      link
      fedilink
      English
      arrow-up
      19
      ·
      11 months ago

      Same. I bet Dropbox is running damage control on it.

      Article said this news already hit other social media platforms.

    • shiiiiiiiiiiiiiiiiit@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      8
      ·
      edit-2
      11 months ago

      Pinned comment on original article says:

      Didn’t see it mentioned in the article, but per the linked FAQ it says the alpha AI applies to:

      In countries with the preferred language set to English.

      Excluding Canada, the UK (United Kingdom), and countries within the EEA (European Economic Area).

    • time_fo_that@lemmy.world
      link
      fedilink
      English
      arrow-up
      3
      ·
      11 months ago

      I found it under “Third-party AI” on the web portal settings. It was enabled for me, I’m in the US.

  • JohnEdwa@sopuli.xyz
    link
    fedilink
    English
    arrow-up
    23
    ·
    edit-2
    11 months ago

    How unsurprising, a headline that technically doesn’t lie, but also gives a completely misleading impression. At least it has been fixed since: the current, accurate one is “Dropbox spooks users with new AI features that send data to OpenAI when used

    Because your files only get sent to the AI search service if you use the AI search feature, which it tells you will send the one specific file you are asking the AI to analyze to OpenAi. Which, you know… Duh?

    The third-party AI toggle is only turned on to give all eligible customers the opportunity to view our new AI features and functionality, like Dropbox AI. It does not enable customers to use these features without notice. Any features that use third-party AI offer disclosure of third-party use, and link to settings that they can manage. Only after a customer sees the third-party AI transparency banner and chooses to proceed with asking a question about a file, will that file be sent to a third-party to generate answers. Our customers are still in control of when and how they use these features

  • cheese_greater@lemmy.world
    link
    fedilink
    English
    arrow-up
    18
    ·
    edit-2
    11 months ago

    PSA: use Cryptomator if u gonna use public clouds

    Also: public cloud + cryptomator > e2ee cloud (Proton etc)

    • Tiger Jerusalem@lemmy.world
      link
      fedilink
      English
      arrow-up
      4
      ·
      11 months ago

      An interesting note: OneDrive really dislikes that, it reads your encrypted files as ransomware and asks you to say they’re OK every time you upload something new. It’s really annoying.

      • cheese_greater@lemmy.world
        link
        fedilink
        English
        arrow-up
        5
        arrow-down
        1
        ·
        edit-2
        11 months ago

        Then stop using it and go to Sync > Dropbox > Box (not 100% if it works for Box), way better

        Of course OneDrive hates it, you’re cucking Microsoft from access to your cleartext files.

        I can’t haz private files? 🥺

        —Microsoft, definitely

  • ???@lemmy.world
    link
    fedilink
    English
    arrow-up
    10
    arrow-down
    2
    ·
    11 months ago

    Of all things and companies in existence, I had never imagined Dropbox would betray me like that.

    • MeatsOfRage@lemmy.world
      link
      fedilink
      English
      arrow-up
      6
      ·
      11 months ago

      It only interacts with OpenAI when you use the feature and warns you about it ahead of time. None of your files were automatically sent over and if you don’t want to use this feature they allow you to turn it off. This is in the article.

      • ???@lemmy.world
        link
        fedilink
        English
        arrow-up
        3
        ·
        11 months ago

        Tech companies are only as good as their financial health.

        This is true, in every way.

  • AutoTL;DR@lemmings.worldB
    link
    fedilink
    English
    arrow-up
    8
    arrow-down
    1
    ·
    11 months ago

    This is the best summary I could come up with:


    In its FAQ, Dropbox contradicts this claim, saying, “We won’t let our third-party partners train their models on our user data without consent.”

    In July, the company announced an AI-powered feature called Dash that allows AI models to perform universal searches across platforms like Google Workspace and Microsoft Outlook.

    Still, multiple Ars Technica staff who had no knowledge of the Dropbox AI alpha found the setting enabled by default when they checked.

    It also says, “Only the content relevant to an explicit request or command is sent to our third-party AI partners to generate an answer, summary, or transcript.”

    Log into your Dropbox account on a desktop web browser, then click your profile photo > Settings > Third-party AI.

    On that page, click the switch beside “Use artificial intelligence (AI) from third-party partners so you can work faster in Dropbox” to toggle it into the “Off” position.


    The original article contains 518 words, the summary contains 147 words. Saved 72%. I’m a bot and I’m open source!

    • SzethFriendOfNimi@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      ·
      11 months ago

      Only related to an explicit request. And yet to fulfill that request “tax documents related to business Y” will require that the API have a catalog of that data aggregated already to fulfill that request

  • Rentlar@lemmy.ca
    link
    fedilink
    English
    arrow-up
    6
    ·
    edit-2
    11 months ago

    Hey I was thinking about cloud backups. I gotta encrypt important files then if dropbox is gonna have AI go through them at will. My alternative was just copying stuff to a hard drive and shoving it in a safety deposit box…

    • willis936@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      ·
      11 months ago

      NAS + cloud backup is the way to go. Any NAS software worth its salt can do E2EE backup with any old cloud backup solution.

      Definitely not for the faint of heart though. If you don’t actively enjoy fiddling then there aren’t many good options. Maybe icloud if you trust Apple to not de-platform you.