Apple Event Roundup - 10 Things We Learned From Apple’s iPad Mini Launch BassBuds High Performance In-Ear Headphones with Mic/MP3 Controller We Review Dishonored, One of the Must Have Games for 2012 Here's 10 Reasons Why You Should Consider Buying a Washer Dryer
Dropbox Drops All Passwords for 4 Hours!

Online storage space Dropbox experienced a serious security breach when passwords were made optional for four hours, allowing anyone to access anyone’s Dropbox account just by typing in their email address.

Seeing as Dropbox is supposedly a secure online storage space where users keep documents, files, images and all sorts of sensitive data, this is a big blow for the online storage device.

People were allowed to log in without using any passwords, defeating the point of the website’s unique selling point- security.

The password free for all was open to anyone for four hours. The incident happened at 1.54 pm Pacific time (6.54pm GMT) on Sunday and fixed at 5.46 pm Pacific time (1.46am GMT). The problem itself was fixed within 5 minutes of discovery; it only took Dropbox 4 hours to notice the problem.

The Dropbox blog claims that this  incident only affected 1 per cent of users, however this has not convinced some users to continue using the service as  one user Tweeted “Just deleted my Dropbox account…do not trust the cloud anymore.”

The team are now investigating the security breach and notifying anyone who logged in at that time. Dropbox CTO Arash Ferdowsi showed his concern.

“This should never have happened,” he said. “We are scrutinizing our controls and we will be implementing additional safeguards to prevent this from happening again.”

The discovery was found on a post on Pastebin when a person who wishes to remain anonymous was attempting to change their Dropbox password. They found that by typing any password, incorrect ones or no password at all, they could access their account and their friend’s Dropbox accounts, too. This person tried using different computers, ones that they had never logged onto before and the problem still persisted.

Dropbox has over 25 million users of the free service which stores data online. In 2008 the company received $7.2 million in investment from Sequoia Capital and other investors.


advertisement