Dropbox very temporarily failed open (i.e. let people in without actually verifying their password). The question is, do they fail open under a DoS attack on t

Dropbox very temporarily failed open (i.e. let people in without actually verifying their password). The question is, do they fail open under a DoS attack on the machines handling authentication? Do they fail open if you just run enough login attempts?