3 ms·
There's a blog post addressing this incident now on the dropbox blog: http://blog.dropbox.com/?p=821 http://blog.dropbox.com/?p=821 It is very light on detail
by georgemcbay 15y ago
There's a blog post addressing this incident now on the dropbox blog:
http://blog.dropbox.com/?p=821 http://blog.dropbox.com/?p=821
It is very light on details of how exactly the problem occured other than saying it was due to a bug in a code update.
- jevinskie 15y agoThey say that less than 1% of all of their users logged in during the vulnerable time frame. I suspect those are weasel words to downgrade the apparent severity of the problem. A more useful metric would be # user logins during vulnerable timeframe / # user logins per day.
- nupark2 15y agoThe fact that this could happen is a fairly significant indictment of their technical capabilities and the amount of trust they deserve when it comes to safe-guarding your data. If there's anyway in your code that deserves unit and integration tests, it's your authentication system.