Your Web News in One Place

Help Webnuz

Referal links:

Sign up for GreenGeeks web hosting
June 21, 2011 03:18 am GMT

Dropbox Security Bug Made Passwords Optional For Four Hours

This morning a post on Pastebin outlined a serious security issue that was spotted at Dropbox: for a brief period of time, the service allowed users to log into accounts using any password. In other words, you could log into someone's account simply by typing in their email address.Given that many people entrust Dropbox with secure data (one of the service's selling points is its security), that's a really big deal.We've now confirmed with Dropbox that the service did have this issue yesterday "Dropbox says that it began after a code push at 1:54 PM PST and was fixed at 5:46 PM PST (they had the fix live five minutes after they discovered it). So, in total, the bug was live for around four hours.

Original Link: http://feedproxy.google.com/~r/Techcrunch/~3/PxeiLYEnIIQ/

Share this article:    Share on Facebook
View Full Article

Techcrunch

TechCrunch is a leading technology blog, dedicated to obsessively profiling startups, reviewing new Internet products, and breaking tech news.

More About this Source Visit Techcrunch