Educause Security Discussion mailing list archives

Box's client security


From: Martin Manjak <mmanjak () ALBANY EDU>
Date: Fri, 20 Apr 2012 11:27:31 -0400

The security provisions of The I2 NET+Box offering look good from the
provider's perspective.

We know there were problems at both ends with Dropbox (encryption keys
and the ability to manipulate the identifier on the local client).

Box looks like they've addressed the hosting side concerns, but I
haven't seen any discussions yet of how the client works
(authentication, synchronization).

Can anyone speak to this?
Marty

-- 

Martin Manjak
CISSP, GIAC GSEC-G
Information Security Officer
University at Albany
MSC 209 518/437-3813

The University at Albany will never ask you to reveal your password.
Please ignore all such requests.


Current thread: