He makes one very good suggestion: At the very minimum, Dropbox needs to have a thorough security audit from an independent group to ensure that it has the pro

He makes one very good suggestion: At the very minimum, Dropbox needs to have a thorough security audit from an independent group to ensure that it has the processes in place to back up those promises. Call it security theatre, a waste of time and resources, or whatever you want, but I would find this very reassuring as a Dropbox user, and it would help me to trust the service again. That, and an independent verification of their claims about the number of users possibly affected by the no-password security bug.