> and nearly all have the same problem, which is that any data you upload can be decrypted by the provider.

The author includes SpiderOak under this statement. Whilst I understand that they can decrypt anything if you give them the password through their web interface, I was under the assumption that this wasn't possible if you never downloaded any of your files through their web interface.

Am I under a false assumption here? Is there something I am missing?