Live data from Hacker News

Why was my email leaked?

forums.dropbox.com

51–60 of 265 posts

Re: Why was my email leaked?

#51
post #42

Why do people continue to upload and trust their data to this company? I closed my Dropbox account back in 2011 when they had that 'bug' that made passwords for any account optional for four hours. Since then they have had more security problems/breaches, and admitted to user info being stolen. Today's news isn't anything concrete... but their moderators were jerks, which makes the company look bad whether they are e…

What alternatives are there?

Re: Why was my email leaked?

#52

Is that dropbox@domain.com email listed on any of your phone contacts? Ever had a virus on a machine that has sent or received an email from that account? How many people know that account exists? Only one of them needs to have a careless attitude about permissions.

Nope, nope and nope.

Re: Why was my email leaked?

#53
post #13

Holy crap Dropbox's moderators make me want to terminate my account with them.

Reading that thread was painful. I always use custom one-off email addresses for services I sign-up for and. When I've attempted to report disclosure of my email address I'm almost always met with major skepticism. It's maddening. I used to enjoy the reactions I'd get from store clerks and telephone reps when I give them my email address. "Oh, how you have an email address with our company name in it?" In recent year…

It is actually possible that you violate their tos by doing so - it could be construed as falsely implying some representation of the company. A stretch to any sane person, though any typical terms document contains miles and miles of cya.

Re: Why was my email leaked?

#54
post #30

Aha, that explains it! I've been contacting school about my e-mail address being spammed; I was certain I never publicly posted it. I used my school's e-mail address for the Dropbox Space Race a while ago.

There are several reasons you could be getting spam that aren't related to Dropbox. Without knowing your address, it's possible that the spammers randomly guessed it. Another possibility is that a friend's email or Facebook account was compromised, exposing your email address. (I get a disturbing amount of spam this way.) The cases described in the Dropbox forum are more convincing because the addresses were used onl…

No, that is not possible. I use thousands of e-mail addresses, and only the ones that have dropbox accounts (I confirmed by sending myself password resets) are receiving spam.

Re: Why was my email leaked?

#55
post #41

Earlier quoted context omitted.

Yup, especially Chris' behaviour is a no go. I don't know how the mods are affiliated with dropbox but if they are employees I wouldn't let them have any customer contact at all.

why wouldn't you want your employees having contact with your customers?

GP means that, if these are employees, their capacity for dealing with customers is so low that it's a net negative for them to continue doing so.

Re: Why was my email leaked?

#58
post #19
post #13

Holy crap Dropbox's moderators make me want to terminate my account with them.

I call this "Google effect". Some companies started to think they can have crappy customer support because Google's support is crappy and Google is doing great. Actually Google is doing great despite their crappy support.

Google's support tends to be nonexistent rather than outright hostile. There's quite a difference.

Re: Why was my email leaked?

#59
post #4

The way the moderators handled this was pretty damn bad. Two different users tell the moderator they use UNIQUE e-mail addresses for dropbox only, and they received spam roughly at the same time and yet the moderator answers by assuming the users are idiots.

The way some people do "fredsmith+amazon@gmail.com" as proof that it must be amazon that leaks their passwords has some issues. The guy who says that he had a truly random bunch of letters as his dropbox account is probably a better indicator, but it's hard to know if the guy ever leaked it himself. Doesn't excuse the moderators being jerks, though.

Speaking of which, this alias system from google is great in theory, but kind of pointless in practice; spammers can easily figure out they can just remove everything from the + sign, including the sign itself, and boom, they have my address without the specific alias.

Re: Why was my email leaked?

#60
What about the possibility that end-users' computers are breached?

- User/pass is saved in the 'Remembered password' area of browser (this is decodable by malware) - Email is screen-scraped by malware - Email is sniffed during login at a wifi hotspot (Password is encrypted, user/email may not be) - 3rd party apps that are linked to your dropbox account

I'm not saying that this wasn't caused by the database breach, but there are a TON of reasons that this could have happened. Some on Dropbox, some on the end users.

Don't expect your email address to stay private. That's what passwords are for.

Post reply on HN