Dropbox Security Glitch Allowed Anyone to Access User Accounts

[ Thanks to An Anonymous Reader for this link. ]

"'A very small number of users (much less than 1 percent) logged in during that period, some of whom could have logged into an account without the correct password. As a precaution, we ended all logged in sessions," Dropbox' Arash Ferdowsi wrote. "We’re conducting a thorough investigation of related activity to understand whether any accounts were improperly accessed. If we identify any specific instances of unusual activity, we’ll immediately notify the account owner.'"

Complete Story

Related Stories:

• ZDNet Australia: SSH Security Glitch Exposes Networks, Patch Re-released(Sep 17, 2003)
• ComputerWorld: ActiveX security glitch found in Explorer 5.0(Aug 26, 1999)