Rclone has been banned from Amazon Drive

[ncw]

For reasons as yet unknown rclone has been banned from Amazon Drive.

All attempts to get tokens are met with "Client authentication failed: invalid_client". And you'll find rclone has disappeared from your authorized apps in your Amazon account.

This only affects Amazon Drive, it doesn't affect any of the other cloud providers that rclone supports.

Amazon haven't been returning either my calls or emails so I don't know exactly why this has happened or whether it is possible that the ban will be reversed - I will update this post if and when I learn more.

Nick

Update 2017-05-20

I have now heard back from Amazon. Rclone has been banned for having the encrypted secrets in the source code.

I've asked for new credentials so I can build an auth server and get rclone going again - I haven't heard back on that reply yet, but it is plausible we could get rclone running again with Amazon Drive in the not too distant future.

Thank you all for your patience

Update 2017-05-30

I've finally heard back from Amazon about my request for new developer credentials (after 10 days!) to build an auth server

We have ended the Amazon Drive API and SDK invitation period to focus on enabling new customer experiences with current developers. Should this change, we will provide an update on our developer website: https://developer.amazon.com/amazon-drive

So I guess that is a no

Nick

[ncw]

[zhup]

Because of PLEX users?

[Tuuan]

Hi there,

Has it got something to do with the acd_cli_oa getting banned a couple of days ago, because of a token bug which could expose data from other users?

I found this item on reddit this morning when I realized Amazon wasn't connecting anymore.

Amazon's reply about the acd_cli issue • r/DataHoarder

[nerwall]

If we were to fork rclone and just re register it as a different developer would that be robust against this sort of thing? As far as I can tell it seems like Amazon wants all app developers to be a part of the auth process as though security through obscurity actually worked. Maybe we could all register our own forks with the only change being a different app name and separate auth?

[reticentnz]

thanks for the update @ncw.

This is really fucking shady from Amazon. It's fair enough they can pick and choose who they want to be their customers, and which apps are accessing their services but what's up with just cutting it and not saying anything? How about letting people know, setting a period of time in which they can grab their data back, and then killing it.

Haven't had a chance to test Arq which I also use with ACD, but I'll definitely be asking for my money back if they have just started blanket banning these third party apps.

[chezmojo]

Haven't had a chance to test Arq which I also use with ACD, but I'll definitely be asking for my money back if they have just started blanket banning these third party apps.

Arq stopped working for me this morning, but I just checked and it's back.

[Ozgur_Erdogan]

I just do not understand the reson of ban. It is just a software and ACD suppose to be serving it. They could have limit bandwidth but no logical reason for banning whole software.

[ncw]

If we were to fork rclone and just re register it as a different developer would that be robust against this sort of thing? As far as I can tell it seems like Amazon wants all app developers to be a part of the auth process as though security through obscurity actually worked. Maybe we could all register our own forks with the only change being a different app name and separate auth?

Unfortunately Amazon seem to have stopped people signing up for the app program. (You can no longer create a security profile with Web access). You have to join a private beta now which I've had no success in joining.

Before amazon stopped that, you would have been able to get your own app id and secret and use rclone with them (just like you can with Google Drive).

[Ajki]

Sad times, hopefully rclone will try to push local cache faster now so we can avoid google bans with rclone gdrive mount.

Issue: [Discussion] rcolone + Metadata features and implementation

Issue: [Discussion] Metadata - How, Which & Where

Issue: [Discussion] Metadata - Update and purge

Issue: [Discussion] Metadata - Handling collisions and discrepancies

[webreaper]

Thanks for the official update. Guess 'unlimited' didn't mean 'unlimited' after all (it never does).

Back to GDrive then....

[Vamp]

Unfortunately Amazon seem to have stopped people signing up for the app program. (You can no longer create a security profile with Web access). You have to join a private beta now which I've had no success in joining.

Before amazon stopped that, you would have been able to get your own app id and secret and use rclone with them (just like you can with Google Drive).

@ncw Now i use Rclone my own code, without any problem.

My question, what do you think, it is possible that Amazon ban my secret code, if i use it actively? (but only just me, i dont want to share my code)

And please dont delete acd option your future release, because some of able to use it, with own code

Best if you add a line with your README that it only work with own secret code.

[gunum_gunum]

in what place in source are you changing this code and what is required on account to do to have it working?

[Vamp]

It need to register a new ACD connection and add you own secret code. It need a old developer account/secret code (about 2 years old)

[e38383]

I still have a client_id/secret from a very old test, but I'm unable to use that as login for rclone. The answer from the Amazon-Webservice is "An+unknown+scope+was+requested&error=invalid_scope". Is there anything that is needed in my profile or did they just ban all old tokens too?

[durval]

I'm at the same time sad for the other rclone users still using ACD, and glad that I myself never paid a single dime to Amazon for their sucky cloud (I cancelled the service when I was still in the trial phase).

I thank @ncw for pursuing the reasons for the Amazon deletion of rclone even if I myself do not use (not plan to ever use) their service, because that could help rclone to eventually avoid the same fate on other services like GDrive.

[pedrosimao]

What Amazon is doing is very unfair. Is there a way I can contact support? Do you have the link? I want to write them to ask for refund.

[Jan-Peter_Koopmann]

So assuming this is gone for good it is time for an alternative. However: I was using an encrypted rclone "path" on ACD. So while I might be able to download the files from Amazon, I cannot easily decrypt it to then upload it to GDrive.

@ncw Is there any workaround you can suggest how I could decrypt those files once I downloaded them from ACD via the web-interface? Otherwise I just lost 1 TB of "live" data... That would be a real pain...

[gnb]

@Jan-Peter_Koopmann, I had this same issue. I am downloading the encrypted folders (using odrive) to a Google Cloud instance and then will rclone them plain to a folder on GDrive. I will then use rclone to mount that encrypted folder on my computer once again (using the same credentials from rclone.conf).
I've tested with a small folder and worked very well. See here for further discussions: https://forum.rclone.org/t/recommendations-for-acd-gsuite-other-transfers/2325/17

[Ajki]

@ncw Is there any workaround you can suggest how I could decrypt those files once I downloaded them from ACD via the web-interface? Otherwise I just lost 1 TB of "live" data... That would be a real pain..

Just point your current crypt drive to location the the files thats it.
Change rclone.conf

OLD

[acdcrypt]
type = crypt
remote = acd:/encrypted
filename_encryption = standard
password = xxx
password2 = xxx

NEW

[acdcrypt]
type = crypt
remote = /home/myuser/encrypted
filename_encryption = standard
password = xxx
password2 = xxx

Now you see all encrypted files there eg rclone ls acdcrypt: ( or whatever name you used ) and you can also mount it egrclone mount /mnt/unencrypted acdcrypt: ,,,,