Bug in Dropbox Affects 25 Million User Accounts
Sunday turned out to be a field day for miscreants, after Dropbox, the popular cloud-based file-hosting service accidentally turned off its password security system.
'Bug'ged
The bug was introduced in the system, when Dropbox made a routine code update at 1:54PM Pacific Time, Sunday. However, it wasn’t until four hours hence, i.e. 5:41PM that the bug caught Dropbox's eye. In the four hours that the bug had to itself, it made sure that the accounts of each one of Dropbox’s 25 million users were made accessible to just about everyone. This means that, users could type in any random detail into the password box, and still be able to peek into someone else's account. The company’s blog post, however, claims that only a couple of the users’ accounts were tampered with, and that they are investigating the matter.
Security analysts believe that Dropbox’s system of storing encrypted data on their servers, instead of the users’ computer, made them vulnerable to such glitches. This incident comes after Christopher Soghoian, a Security Researcher raised doubts over the security assured by Dropbox to its users.
Why AI notetakers are raising serious privacy and security concerns
China's low-cost AI models are changing the global AI race. Here's why Silicon Valley is worried
China's Kimi K3 challenges US AI leaders with frontier-level performance at lower cost
How did Instagram run ads promoting child abuse in India?
Why has India halted WhatsApp’s username feature before launch?