@darkvenger, yes it is getting ridiculous, and there's a simple solution:
https://dl-web.dropbox.com/u/17/dropbox-lnx.x86-3.14.7.tar.gz
It's not a matter of having the Dropbox name in the link. As @joaompinto mentioned, it's about downloading the source code from a place without manually checking if the link is legit.
If it is using SSL and comes from the dropbox domain, it gives some level of authenticity. To check the authenticity of the cloudfront link you have to manually go to their forums. (Or otherwise blindly trust the maintainer/cloudfront link)
Is this a upstream issue? Yes, I think. Could this be fixed by changing the link to the one above and ending this silly discussion? Yes.
Search Criteria
Package Details: dropbox 220.4.4126-1
Package Actions
Git Clone URL: | https://aur.archlinux.org/dropbox.git (read-only, click to copy) |
---|---|
Package Base: | dropbox |
Description: | A free service that lets you bring your photos, docs, and videos anywhere and share them easily. |
Upstream URL: | https://www.dropbox.com |
Licenses: | custom |
Submitter: | mtorromeo |
Maintainer: | mtorromeo |
Last Packager: | mtorromeo |
Votes: | 2378 |
Popularity: | 1.75 |
First Submitted: | 2009-01-22 14:21 (UTC) |
Last Updated: | 2025-03-26 08:13 (UTC) |
Dependencies (14)
- dbus (dbus-gitAUR, dbus-selinuxAUR)
- fontconfig (fontconfig-gitAUR, fontconfig-ubuntuAUR)
- libsm
- libxcomposite
- libxdamage
- libxmu
- libxrender
- libxslt (libxslt-gitAUR)
- libxxf86vm
- gendesk (make)
- libappindicator-gtk3 (optional) – make tray icons themed under some desktop environments like KDE plasma
- perl-file-mimeinfo (optional) – opening dropbox folder on some desktop environments
- ufw-extras (optional) – ufw rules for dropbox
- xdg-utils (busking-gitAUR, xdg-utils-slockAUR, mimiAUR, mimi-gitAUR, xdg-utils-handlrAUR, openerAUR, xdg-utils-mimeoAUR, mimejs-gitAUR) (optional) – for "Launch Dropbox Website" and file manager integration
Required by (9)
Sources (8)
- dropbox.service
- dropbox@.service
- DropboxGlyph_Blue.svg
- https://clientupdates.dropboxstatic.com/dbx-releng/client/dropbox-lnx.x86-205.4.5765.tar.gz
- https://clientupdates.dropboxstatic.com/dbx-releng/client/dropbox-lnx.x86-205.4.5765.tar.gz.asc
- https://edge.dropboxstatic.com/dbx-releng/client/dropbox-lnx.x86_64-220.4.4126.tar.gz
- https://edge.dropboxstatic.com/dbx-releng/client/dropbox-lnx.x86_64-220.4.4126.tar.gz.asc
- terms.txt
Latest Comments
« First ‹ Previous 1 .. 27 28 29 30 31 32 33 34 35 36 37 .. 97 Next › Last »
rafasc commented on 2016-02-26 00:57 (UTC)
darkvenger commented on 2016-02-26 00:25 (UTC)
This discussion is indeed getting really annoying, saying that a URL is more official than another just because one contains the dropbox word (https://dl-web.dropbox.com) and the other does not (https://d1ilhw0800yew8.cloudfront.net) seems a little ridiculous.
For those who are really concerned you should probably complain to Dropbox. Why is the Linux platform the only binary in https://www.dropboxforum.com that comes from cloudfront?
joaompinto commented on 2016-02-25 20:34 (UTC)
Hello mtorromeo,
I will take a look at your comments and improve my PKGBUILD. I hope you do the same and understand why people care about using official download links, with proper SSL certificates, from the software provider, and not from a 3rd party.
SSL was invented for a reason, encryption and identity. While encryption is not a requirement for this case. Identity is. Please check the following:
curl -vq https://dropbox.com 2>&1 | grep "subject"
curl -vq https://d1ilhw0800yew8.cloudfront.net/ 2>&1 | grep "subject"
To validate your statement "cloudfrount links ARE OFFICIAL" people will need to download from https://dropbox.com, run a sha256sum on the resulting files, and check against your PKGBUILD sha256sum.
mtorromeo commented on 2016-02-24 10:27 (UTC)
STOP wasting my time and spamming everyone's mailboxes with useless requests to change the download URLs.
The cloudfrount links ARE OFFICIAL release locations.
mtorromeo commented on 2016-02-24 10:25 (UTC)
@lamego.pinto: You are not even downloading the specific pkgver so your PKGBUILD will break at every release.
joaompinto commented on 2016-02-24 10:17 (UTC)
Please update with links to the official dropbox client download site:
I have done and tested, you can get it from:
https://github.com/MyWayOS/AUR_patches/blob/master/dropbox/PKGBUILD
oberon2007 commented on 2016-02-16 02:58 (UTC)
Thank you for this package! New stable release 3.14.5 is available now: https://www.dropboxforum.com/hc/en-us/community/posts/205672126-Stable-Build-3-14-5
mtorromeo commented on 2016-02-07 10:46 (UTC)
That was an official location. And I updated the URL anyway so please drop this argument already...
mathieu.clabaut commented on 2016-02-07 09:11 (UTC) (edited on 2016-02-07 09:17 (UTC) by mathieu.clabaut)
I also have some concerns, for that I observe a strange behaviour where dropbox continuously upload data ever when everything is synced and there are no reason for uploading a vast quantity of data !
I don't know if it is a bug or an intended behaviour, but I do not feel easy about having this piece of software coming from unofficial location.
However, comparing the md5sum of the targz with the one from https://www.dropbox.com/download?plat=lnx.x86_64 gives the same results
Pinned Comments
yan12125 commented on 2019-01-05 16:39 (UTC) (edited on 2019-02-27 08:11 (UTC) by yan12125)
Run the following command in case you got errors during "Verifying source file signatures with gpg..."
Alternatively, you can download Dropbox's public key from https://linux.dropbox.com/fedora/rpm-public-key.asc and import it with:
You can check whether keys are successfully imported or not using the output of
gpg -k
. You should find something like this:yan12125 commented on 2018-08-01 11:41 (UTC) (edited on 2020-01-24 15:13 (UTC) by yan12125)
If you can't run the dropbox@ service normally, try to create a read-only directory ~/.dropbox-dist and run again.
yan12125 commented on 2017-11-06 15:13 (UTC) (edited on 2019-03-18 03:50 (UTC) by yan12125)
Some useful places for issues about Dropbox itself (not the package):
https://www.dropboxforum.com/t5/Desktop-client-builds/bd-p/101003016 Official Dropbox user feedback forum
Arch Linux discussion places: https://bbs.archlinux.org/, #archlinux on freenode.net, https://lists.archlinux.org/listinfo/aur-general