4 ms·

eeh, since when does u2a protect against back-end breaches? thats just a security layer against phishing or password leaks... don't get me wrong, i'd advice e

• hellofunk 9y ago
  > since when does u2a protect against back-end breaches? Because if someone steals your DB password, they still won't be able to login to your account. Maybe they won't have to, if they also stole your data and found a way to decrypt it, but since those are different things, it is plausible that there could be a leak of login information without a leak of data, in which case your two-factor authentication would keep the attackers out of your data.
• ProblemFactory 9y ago
  > since when does u2a protect against back-end breaches? It doesn't have to. For 99.999% people, the two most realistic threats are: * There is a keylogger on some computer where you access your Dropbox, for example at a print shop, * You use the same password on many sites, one gets compromised, and automated bots try to access your Dropbox account.
• dx034 9y ago
  A Dropbox hack is nothing most users have to protect themselves against. Same as with a google breach where GMail data gets leaked. As a personal user of no special interest, no one would use a potential Dropbox vulnerability to just get your data. If you secure your end you'll be fine. That's different for big corporations or people with a public profile (e.g. politicians). In this case you have to ensure that malicious actors with a lot of money and knowledge cannot gain access. But then again, self hosting is likely less secure than Dropbox or Google.