Forum Moderators: open

Message Too Old, No Replies

Woops! DropBox Insecure?

it was for 4 hours anyway

         

lawman

11:53 pm on Jun 21, 2011 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



[eweek.com...]

Due to a bug in the code, anyone around the world could access any Dropbox online storage account by typing in a random string as a password over a four-hour period.

Swanny007

1:09 am on Jun 22, 2011 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Thanks for reminding me again why I don't use one of those online backup services...

Convenient? Yes! Secure? No :)

engine

11:59 am on Jun 22, 2011 (gmt 0)

WebmasterWorld Administrator 10+ Year Member Top Contributors Of The Month



That's a major error on their part. Surely, errors like that can ruin a business such as theirs. In addition, it doesn't do the reputation of other cloud-computing-based systems any good either.

I have never had great faith in cloud-based computing, and errors such as this only go to strenthen my views. We're at the mercy of their security, and any breach results in more data being lost than if it were a local data breach.

I use dropbox for temporary file sharing of large files. I usually remove the files within 24 hours, and certainly as soon as the person i'm sharing the file with has downloaded it.

I never use it for sensitive data.

The only way to be sure you don't get hacked is to physically disconnect from the Internet.

rocknbil

5:49 pm on Jun 22, 2011 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Who was that said, tongue in cheek, "Go Cloud!" Yeah.