Edited the title to what the article has now.

  • MeatsOfRage@lemmy.world
    link
    fedilink
    English
    arrow-up
    118
    arrow-down
    7
    ·
    edit-2
    1 year ago

    Holy hell guys, did you all just read the headline and run to the comment section?

    • enabled by default means you can see the feature and interact with it if you choose to do so

    • when you interact with it, it explains it needs to send this file to OpenAI. Of course it does, that’s how it knows what you’re asking of it. You are prompted to choose to use this feature

    • if you choose not to interact with it, nothing has changed, nothing has been sent anywhere

    • if you really don’t want to look at it anymore you can turn it off, which is nice. A lot of companies drop stuff like this and you’re stuck with it whether you like it or not

    • ∟⊔⊤∦∣≶@lemmy.nz
      link
      fedilink
      English
      arrow-up
      25
      arrow-down
      1
      ·
      1 year ago

      I, for one, have been trained by corporations and news agencies to react impulsively and without any deeper consideration for decades now.

      /s

    • Dizzy Devil Ducky@lemm.ee
      link
      fedilink
      English
      arrow-up
      19
      arrow-down
      3
      ·
      1 year ago

      What? You expect people to actually read articles instead of jumping to conclusions based solely on the headlines? Outrageous

      /s

      • oce 🐆@jlai.lu
        link
        fedilink
        English
        arrow-up
        16
        ·
        1 year ago

        Me, an intellectual, basing myself solely on the most legit looking comment instead of reading the article.

    • Dr. Moose@lemmy.world
      link
      fedilink
      English
      arrow-up
      13
      arrow-down
      1
      ·
      1 year ago

      when you interact with it, it explains it needs to send this file to OpenAI

      /thread

    • lolcatnip@reddthat.com
      link
      fedilink
      English
      arrow-up
      12
      arrow-down
      2
      ·
      1 year ago

      The more I read this community the more I think it’s populated mainly by children and pearl-clutching conspiracy theorists.

        • frunch@lemmy.world
          link
          fedilink
          English
          arrow-up
          6
          arrow-down
          1
          ·
          1 year ago

          No, this place is much better–we have you here! 😀 Thanks for commenting and adding to the discourse ✨

  • Showroom7561@lemmy.ca
    link
    fedilink
    English
    arrow-up
    116
    arrow-down
    5
    ·
    edit-2
    1 year ago

    … enabled-by-default

    shares your Dropbox data with OpenAI …

    … an experimental AI-powered search feature. …

    … user data [IS] shared with third-party AI partners…

    This would be more than enough reason for me to cancel and delete my account if I were still a customer.

    If you can’t trust a company with your data, then you can’t trust the company at all.

    Why do companies have to be so opaque with things? If they really wanted users to try some experimental, data-sharing feature, offer it to them as an opt-in beta feature and pay them for being a guinea pig.

    Consent with compensation is way better than non-consent with zero transparency.

    • Otter@lemmy.ca
      link
      fedilink
      English
      arrow-up
      32
      ·
      1 year ago

      This should be justification enough for any enterprise company using Dropbox to dump them overboard

    • time_fo_that@lemmy.world
      link
      fedilink
      English
      arrow-up
      13
      ·
      edit-2
      1 year ago

      Fuck. I have been using them for backup for years, I currently have everything on my NAS but still like having important stuff in an offsite backup.

      Anyone know a reasonably priced cloud storage provider that has integration (either 3rd or 1st party) with Unraid?

      Edit: Dropbox just renewed my annual subscription last night at midnight 🙃

      Double edit: I went into my Dropbox web portal and found that the setting was enabled by default for me. I’m in the US.

      • Hexarei@programming.dev
        link
        fedilink
        English
        arrow-up
        6
        ·
        1 year ago

        I use wasabi, it’s an Amazon s3 compatible storage solution, $5/month/TB with no network or access fees

        • time_fo_that@lemmy.world
          link
          fedilink
          English
          arrow-up
          1
          ·
          edit-2
          1 year ago

          Oh that’s not bad! Thanks I’ll look into it. What are you using to send the backups to Wasabi?

          • Hexarei@programming.dev
            link
            fedilink
            English
            arrow-up
            1
            ·
            edit-2
            1 year ago

            I run my NAS on TrueNAS, and it just has a built-in solution for taking ZFS snapshots, encrypting them, and shipping them to an S3-compatible storage.

            However, for unraid, I think your easiest thing will be to use the rclone plugin

      • PorkSoda@lemmy.world
        link
        fedilink
        English
        arrow-up
        4
        ·
        1 year ago

        I use Unraid too. What app are you using for backup? Most allow for encrypted backups which renders this issue moot (though still shitty).

        I use Duplicacy (not to be confused with the unreliable Duplicati) and send encrypted backups to B2 Backblaze.

        • time_fo_that@lemmy.world
          link
          fedilink
          English
          arrow-up
          1
          ·
          1 year ago

          I’m actually not backing up my NAS at the moment. It’s been on my to do list for a while to figure out a solution.

          How much does Backblaze run you per month? I’ve got ~2tb stored currently.

      • willis936@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        ·
        edit-2
        1 year ago

        I had good luck with B2 backblaze but recently switched to storj for E2EE backups without having encrypted filenames in the browser. Overall these solutions are slower and more expensive than typical cloud backups, but it’s well worth it to stick it to the man.

        Edit: more expensive, not cheaper.

          • willis936@lemmy.world
            link
            fedilink
            English
            arrow-up
            1
            ·
            1 year ago

            TrueNAS Scale has a built-in cloud backup tool that supports the common sites and protocols. Most all NAS solutions have something similar. It’s really just an rsync wrapper with authentication and storage protocol support.

    • MeatsOfRage@lemmy.world
      link
      fedilink
      English
      arrow-up
      8
      ·
      1 year ago

      There’s a lot of missing context with those ellipsis. Enabled by default means you’re just going to see the feature but it’s not doing anything or sending any data until you interact with it. Even when you do it prompts you first to explain what it’s going to do. If you don’t want to see the feature at all you can just toggle it back off but no data has moved until you’ve consented to it.

      • Showroom7561@lemmy.ca
        link
        fedilink
        English
        arrow-up
        6
        arrow-down
        2
        ·
        1 year ago

        Yes, a fair point that was mentioned in the article.

        I may be speaking only for myself, but I don’t want any new features enabled by default. Subsequent popups and warnings may be hastily ignored/skipped during a user’s busy day, so it’s too easy to accidentally give consent, and consent shouldn’t be accidental.

        Let users know about the feature in a newsletter or “what’s new” section of the site, and let the user opt-in to try this new feature (if they wish). That’s really the only ethical, transparent, and 100% way to ensure consent.

    • Potatos_are_not_friends@lemmy.world
      link
      fedilink
      English
      arrow-up
      3
      arrow-down
      1
      ·
      1 year ago

      They made some seriously bad choices in the past few years that I honestly don’t believe they can survive by 2030. Just like photobucket and vimeo, Dropbox has reached peak shit.

      I already moved anything sensitive out of my pro account, switched to free, and now use it to store memes and porn since that realization.

  • grue@lemmy.world
    link
    fedilink
    English
    arrow-up
    58
    arrow-down
    8
    ·
    1 year ago

    ITT: not nearly enough people demanding that Dropbox execs go to prison for massive violations of the Computer Fraud and Abuse Act.

    • JohnEdwa@sopuli.xyz
      link
      fedilink
      English
      arrow-up
      22
      arrow-down
      1
      ·
      edit-2
      1 year ago

      Not nearly enough people have read the article and instead make rash decisions based on a misleading clickbait headline that has since been changed to "Dropbox spooks users with new AI features that send data to OpenAI when used "

      Specifically asking the AI search tool to analyze a file for you kinda requires sending that file to OpenAI to be analyzed. And it even asks you if it’s okay first.

    • ∟⊔⊤∦∣≶@lemmy.nz
      link
      fedilink
      English
      arrow-up
      12
      arrow-down
      3
      ·
      1 year ago

      It’s just corps being corps. Even the guy who literally gave 10,000 people AIDS didn’t get jail time. The Dropbox execs will be lucky to get anything more severe than a bouquet and a box of chocolates. We all know that, and no amount of demanding will do jack shit. Only your wallet has a voice that gets heard.

      • grue@lemmy.world
        link
        fedilink
        English
        arrow-up
        15
        arrow-down
        1
        ·
        1 year ago

        That’s not a reason to get complacent about it; that’s a reason to get even more pissed off.

        • ∟⊔⊤∦∣≶@lemmy.nz
          link
          fedilink
          English
          arrow-up
          5
          arrow-down
          3
          ·
          edit-2
          1 year ago

          That’s not good for your mental or physical health. I’ve been pissed off for too long. Just share the news stories and suggest alternatives, and never give the corps any money or data if you can help it.

    • squidspinachfootball@lemm.ee
      link
      fedilink
      English
      arrow-up
      1
      ·
      1 year ago

      I only wish you could manage files in the backend without going through the web GUI. So slow having to manually upload everything through there.

    • radix@lemmy.world
      link
      fedilink
      English
      arrow-up
      22
      ·
      1 year ago

      It’s not in any of the articles, but in dropbox forums:

      The Third-Party AI features are not available to everyone yet. The features are in alpha and are only available to customers on Dropbox Professional, Essentials, Business, Business Plus, and some customers on Dropbox Standard and Advanced.

      If you’re on a Basic, Plus or Family account, or you’re part of one of the other groups that don’t yet have access, the Third-Party AI features won’t be available to you.

      • paraphrand@lemmy.world
        link
        fedilink
        English
        arrow-up
        18
        ·
        1 year ago

        Cool, so we have to just keep thinking about it and checking in to turn it off. Great way to combat a wave of people opting out.

        • cyd@lemmy.world
          link
          fedilink
          English
          arrow-up
          9
          arrow-down
          1
          ·
          1 year ago

          By the time it appears, it will have been “on” for some nonzero duration before you switch it off, so I guess they could already have irreversibly vacuumed up your existing data…

      • Potatos_are_not_friends@lemmy.world
        link
        fedilink
        English
        arrow-up
        6
        ·
        1 year ago

        Yikes.

        Prayers to all the companies using Dropbox as cloud storage.

        Your intellectual property and private docs is now given to AI! Haha y’all are so fucked!

    • treefrog@lemm.ee
      link
      fedilink
      English
      arrow-up
      22
      ·
      1 year ago

      Same. I bet Dropbox is running damage control on it.

      Article said this news already hit other social media platforms.

    • shiiiiiiiiiiiiiiiiit@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      8
      ·
      edit-2
      1 year ago

      Pinned comment on original article says:

      Didn’t see it mentioned in the article, but per the linked FAQ it says the alpha AI applies to:

      In countries with the preferred language set to English.

      Excluding Canada, the UK (United Kingdom), and countries within the EEA (European Economic Area).

      • paraphrand@lemmy.world
        link
        fedilink
        English
        arrow-up
        3
        ·
        1 year ago

        Hmm. I’m in the US. But I maybe I didn’t tell Dropbox I prefer English back when I signed up nearly 20 years ago.

        • micka190@lemmy.world
          link
          fedilink
          English
          arrow-up
          3
          ·
          edit-2
          1 year ago

          Closest I can think of is “FOIPP” (Freedom of Information and Protection of Privacy) in Alberta at least (not sure if the rest of the country has equivalents). But that’s mostly things like “you can’t share this confidential email with someone else without my permission” kind of thing.

    • time_fo_that@lemmy.world
      link
      fedilink
      English
      arrow-up
      3
      ·
      1 year ago

      I found it under “Third-party AI” on the web portal settings. It was enabled for me, I’m in the US.

  • JohnEdwa@sopuli.xyz
    link
    fedilink
    English
    arrow-up
    30
    arrow-down
    1
    ·
    edit-2
    1 year ago

    How unsurprising, a headline that technically doesn’t lie, but also gives a completely misleading impression. At least it has been fixed since: the current, accurate one is “Dropbox spooks users with new AI features that send data to OpenAI when used

    Because your files only get sent to the AI search service if you use the AI search feature, which it tells you will send the one specific file you are asking the AI to analyze to OpenAi. Which, you know… Duh?

    The third-party AI toggle is only turned on to give all eligible customers the opportunity to view our new AI features and functionality, like Dropbox AI. It does not enable customers to use these features without notice. Any features that use third-party AI offer disclosure of third-party use, and link to settings that they can manage. Only after a customer sees the third-party AI transparency banner and chooses to proceed with asking a question about a file, will that file be sent to a third-party to generate answers. Our customers are still in control of when and how they use these features

    • _dev_null@lemmy.zxcvn.xyz
      link
      fedilink
      English
      arrow-up
      6
      ·
      1 year ago

      Out of curiosity, do you (or anyone else reading this) have a screencap of the “third-party AI transparency banner” that the dropbox rep said is shown when using the functionality in question?

      I did a quick ddg search for it, but couldn’t find an example. I’d like to reserve judgement till I see the full verbiage of what is/was shown.

  • cheese_greater@lemmy.world
    link
    fedilink
    English
    arrow-up
    24
    ·
    edit-2
    1 year ago

    PSA: use Cryptomator if u gonna use public clouds

    Also: public cloud + cryptomator > e2ee cloud (Proton etc)

      • cheese_greater@lemmy.world
        link
        fedilink
        English
        arrow-up
        7
        ·
        edit-2
        1 year ago

        Creates a client-side fully e2ee vault to safely store your cloud files in on whatever cloud is compatible (Dropbox, OneDrive, Sync, etc)

        Dropbox can scan that AND my balls and share it with all their partners and I don’t give a fuck lol

    • Tiger Jerusalem@lemmy.world
      link
      fedilink
      English
      arrow-up
      5
      ·
      1 year ago

      An interesting note: OneDrive really dislikes that, it reads your encrypted files as ransomware and asks you to say they’re OK every time you upload something new. It’s really annoying.

      • cheese_greater@lemmy.world
        link
        fedilink
        English
        arrow-up
        6
        arrow-down
        1
        ·
        edit-2
        1 year ago

        Then stop using it and go to Sync > Dropbox > Box (not 100% if it works for Box), way better

        Of course OneDrive hates it, you’re cucking Microsoft from access to your cleartext files.

        I can’t haz private files? 🥺

        —Microsoft, definitely

  • ???@lemmy.world
    link
    fedilink
    English
    arrow-up
    15
    arrow-down
    2
    ·
    1 year ago

    Of all things and companies in existence, I had never imagined Dropbox would betray me like that.

      • ???@lemmy.world
        link
        fedilink
        English
        arrow-up
        3
        ·
        1 year ago

        Tech companies are only as good as their financial health.

        This is true, in every way.

    • MeatsOfRage@lemmy.world
      link
      fedilink
      English
      arrow-up
      6
      ·
      1 year ago

      It only interacts with OpenAI when you use the feature and warns you about it ahead of time. None of your files were automatically sent over and if you don’t want to use this feature they allow you to turn it off. This is in the article.

  • AutoTL;DR@lemmings.worldB
    link
    fedilink
    English
    arrow-up
    9
    arrow-down
    1
    ·
    1 year ago

    This is the best summary I could come up with:


    In its FAQ, Dropbox contradicts this claim, saying, “We won’t let our third-party partners train their models on our user data without consent.”

    In July, the company announced an AI-powered feature called Dash that allows AI models to perform universal searches across platforms like Google Workspace and Microsoft Outlook.

    Still, multiple Ars Technica staff who had no knowledge of the Dropbox AI alpha found the setting enabled by default when they checked.

    It also says, “Only the content relevant to an explicit request or command is sent to our third-party AI partners to generate an answer, summary, or transcript.”

    Log into your Dropbox account on a desktop web browser, then click your profile photo > Settings > Third-party AI.

    On that page, click the switch beside “Use artificial intelligence (AI) from third-party partners so you can work faster in Dropbox” to toggle it into the “Off” position.


    The original article contains 518 words, the summary contains 147 words. Saved 72%. I’m a bot and I’m open source!

    • SzethFriendOfNimi@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      ·
      1 year ago

      Only related to an explicit request. And yet to fulfill that request “tax documents related to business Y” will require that the API have a catalog of that data aggregated already to fulfill that request

  • Rentlar@lemmy.ca
    link
    fedilink
    English
    arrow-up
    7
    ·
    edit-2
    1 year ago

    Hey I was thinking about cloud backups. I gotta encrypt important files then if dropbox is gonna have AI go through them at will. My alternative was just copying stuff to a hard drive and shoving it in a safety deposit box…

    • willis936@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      ·
      1 year ago

      NAS + cloud backup is the way to go. Any NAS software worth its salt can do E2EE backup with any old cloud backup solution.

      Definitely not for the faint of heart though. If you don’t actively enjoy fiddling then there aren’t many good options. Maybe icloud if you trust Apple to not de-platform you.

    • ∟⊔⊤∦∣≶@lemmy.nz
      link
      fedilink
      English
      arrow-up
      1
      ·
      1 year ago

      Depending on how far away the box is, this might be the most efficient possible alternative.

      If it takes you an hour to get the drive and plug it in, and the drive is 14TB, you’re looking at a download speed of 31,000 megabits per second.