Archive for June, 2011

Yesterday’s Authentication Bug

Posted by Arash Ferdowsi on June 20, 2011
Dropbox / 1,873 Comments
Hi Dropboxers, 

Yesterday we made a code update at 1:54pm Pacific time that introduced a bug affecting our authentication mechanism. We discovered this at 5:41pm and a fix was live at 5:46pm. A very small number of users (much less than 1 percent) logged in during that period, some of whom could have logged into an account without the correct password. As a precaution, we ended all logged in sessions.

We’re conducting a thorough investigation of related activity to understand whether any accounts were improperly accessed. If we identify any specific instances of unusual activity, we’ll immediately notify the account owner. If you’re concerned about any activity that has occurred in your account, you can contact us at support@dropbox.com.

This should never have happened. We are scrutinizing our controls and we will be implementing additional safeguards to prevent this from happening again.

-Arash

[Update - Mon, 10:46pm] – We’re working around the clock to gather additional data and continue to review logs for potentially unauthorized activity. We aim to notify users who had login activity during the period within the next few hours.

We are sorry for this and regardless of how many people were ultimately affected, any exposure at all is unacceptable to us. We will continue to provide regular updates.

[Update - Tue, 2:49am] – At this point, the accounts that logged in during the period have been emailed with additional activity-related details for review. If you have any questions or concerns, please contact us at support@dropbox.com.

[Update - Fri, 1:59pm] – Today we sent an email directly to users whose accounts were likely compromised during the recent security lapse. According to our records, there were fewer than a hundred affected users and neither account settings nor files were modified in any of these accounts. Our team has been working tirelessly to review what happened and to make sure that it never happens again. At this point, we have contacted all these users and provided them more detail. We will continue to provide updates when available.

Awesome uses for Dropbox (June 2011)

Posted by Jon Ying on June 07, 2011
Dropbox / 174 Comments

Hey everyone! We’re often contacted by people who have found cool uses for Dropbox, and while we’re often impressed by crazy stuff like syncing telescope data between astronomers, or controlling an array of tractors on a farm, we also like hearing about how Dropbox has saved school papers or rescued people at work. That being said, we thought we’d start posting our favorite testimonials of Dropbox we’ve encountered this month.

I just wanted to say that I LOVE DROP BOX! It is so easy to use! I manage a team of agents at a call center in Beaverton, OR and use Dropbox at Work, Home and on my Cell. I will save quality recordings to my Dropbox at work > Listen to them on my way home from my Cell Phone through my Radio > Score the calls when I get home. Dropbox saves me 15 hours easily each week. With the extra time I can spend more time with my agents at work and more time with my family at home. I spend about two hours in my car each day and Dropbox is PERFECT for me! I love you Dropbox! Anonymous

I wanted to take the time to thank you for providing the amazing and spectacular services of Dropbox. I am a doctoral researcher in Australia and at any given time I am working on/with several computers. That said, Dropbox has allowed me (quite easily) to work more efficiently and effectively. Going between my home computer and work computer is a breeze. No longer am I chained to the burdens of an unreliable USB-jump drive or the like. I have recommended it to my friends and family – they too also enjoy the services of Dropbox. In one particular event, I had a meeting with a professor and could not remember her office hours. Because I have set Dropbox as my primary ‘documents’ folder of which included the course syllabus I was able to pull up her office hours and location from my iPhone. In that meeting, she offered me the doctoral researching position I am now in. In short, had I not made that meeting, as intended, or had it not been for Dropbox, a very different result could have surfaced. In short, thank you. Ian, eventual PhD

Just wanted to thank you for a great service. I’ve found so many uses for Dropbox and keep discovering new ones. Tonight for example. My 93 year-old grandmother is in a hospital in Japan. My mother is there with her; she and I are sharing a folder on Dropbox. After an email from mom telling me that grandma really enjoyed seeing videos of my three-year-old son singing, I quickly shot another video of him, uploaded it to our shared folder, and they were watching the video less than an hour later. How cool is that? Debi

If you’ve got a great story to tell us about how Dropbox has helped you out, let us know at stories@dropbox.com. Thanks everyone!