Hackers Claim to Have Nearly 7 Million of Dropbox Usernames and Passwords

Dropbox-icon-960x540

UPDATE:
From Dropbox Blog:

Dropbox wasn’t hacked

Recent news articles claiming that Dropbox was hacked aren’t true. Your stuff is safe. The usernames and passwords referenced in these articles were stolen from unrelated services, not Dropbox. Attackers then used these stolen credentials to try to log in to sites across the internet, including Dropbox. We have measures in place to detect suspicious login activity and we automatically reset passwords when it happens.

Attacks like these are one of the reasons why we strongly encourage users not to reuse passwords across services. For an added layer of security, we always recommend enabling 2 step verification on your account.

Ars Technica:

Popular online locker service Dropbox appears to have been hacked. A series of posts have been made to Pastebin purporting to contain login credentials for hundreds of Dropbox accounts, with the poster claiming that altogether 6,937,081 account credentials have been compromised.

Reddit users who have tested some of the leaked credentials have confirmed that at least some of them work. Dropbox seems to have bulk reset all the accounts listed in the Pastebin postings, though thus far other accounts do not appear to have had their passwords reset.

Statement from Dropbox:

Dropbox has not been hacked. These usernames and passwords were unfortunately stolen from other services and used in attempts to log in to Dropbox accounts. We’d previously detected these attacks and the vast majority of the passwords posted have been expired for some time now. All other remaining passwords have been expired as well.

Regardless of the claim from both the hackers and Dropbox, it is recommended for users to change their passwords. Enabling two-step verification is also highly recommended.

OS X Yosemite: Dark Menu Bar Icons

Two applications that I have floating on the Menu Bar are Dropbox and Twitter. At this point in time both Dropbox and Twitter icons on the Menu Bar do not look good in OS X Yosemite dark mode.

Dark Menu Bar Dropbox Twitter Icons

OS X Yosemite is still in Beta/Developer Preview. For sure a lot of applications will be updated to support the dark mode.

Dropbox Updates Terms of Service, includes the “we read your documents” clause.

Dropbox has been busy informing their users regarding the updated Terms of Service. The Terms of Service also includes the “we read your documents” clause.

  • Permissions. We care about having Terms of Service that are readable, give the right amount of context, and avoid unnecessary legalese, so we’ve updated our language to better match the permissions you give us with the features you use. For example, to provide you with document previews, our automated systems need permission to access and scan your stuff for those previews — so we explain this in the new Terms.

Users would love the document previews feature at the cost of allowing Dropbox system automatically scan and read the documents to generate the said previews. Similar to the way Google read your emails to serve “contextual” ads. In my experience, in-Gmail ads never caught my interests.

Dropbox Blog 20140220

Scam Alert: Fake Email from Dropbox

It seems the same group of spammer/scammer is at it again, This time they are sending fake Dropbox email.

Remember that Dropbox does not send emails to users that their “image has been damaged”.

If you’re an iCloud user, forward this message as attachment to spam@icloud.com.

You could also use SpamCop’s services and please donate if you can.

Spam Fake Dropbox