Hacker News new | ask | show | jobs
by toomuchtodo 5284 days ago
Other side of the coin:

Need my Dropbox access? Sure, here you go. Need my Gmail access, meh, why not?

I'm not horribly concerned with allowing them the access I've granted to Facebook, Twitter, Gmail, Dropbox, and Evernote.
1 comments
parfe 5284 days ago
Yeah, I had no problem with the other junk.

But a "Whoops, we accidentally deleted all your stuff" in dropbox or gmail would be a tad devastating.

link
dgurney 5284 days ago
Wow, can 3rd-party services actually delete all your data if they wanted to? It's not just read-only access?
link
parfe 5284 days ago
I have no idea!

The permissions page at Dropbox says:

The app ifttt would like to connect with your Dropbox.

    This app will have access to your entire Dropbox.
    Please make sure you trust this app before proceeding.
    You're currently logged in as user@example.org. If you meant to connect from another account, you can logout.
Doesn't define what "access" might entail. If the permissions allow create/upload I have to assume it includes delete as well.
link
smackfu 5284 days ago
Dropbox has two types of authorization, entire dropbox level and app-folder level. IFTTT allows you to type in a full dropbox path instead of being restricted to /ifttt, so it requests the full access. It would be nice if they offered you the choice, and then if you picked the app-folder, the paths only allowed /ifttt.

It also looks like DropBox doesn't have access levels beyond that. If you have access, you can use any of the API, upload / download / delete / etc.

link
ceejayoz 5284 days ago
Some of ifttt's Dropbox actions involve doing things like saving an image to your Dropbox, which would be hard with read-only access...
link