Comment

Comment by newhouseb

Hi folks, I work at Dropbox...

- We assert the validity of this binary through other (cryptographic) means in the Dropbox Application.

- We're going to start sign it using the means that JZ's tweet refers to, in addition to our existing checks, to avoid confusion.

- The kernel extension / driver is signed by Dropbox (and this binary asserts that anything we install is signed only by us).

- The kernel extension / driver is opt-in and not enabled for the general population (it's used in our implementation of Smart Sync, née Infinite).

parent newhouseb 9 years ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton