Hundreds of Dropbox passwords leaked online

badboy · Oct 14, 2014, 03:48 AM

http://thenextweb.com/apps/2014/10/1...-alleged-hack/

Quote:

A thread surfaced on Reddit today that contained links to files containing hundreds of usernames and passwords for Dropbox accounts in plain text, but it’s unclear where they were obtained from.

Here we go again....

we really need a better system than usernamn and passwords....

Sundance Kid V2 · Oct 14, 2014, 04:05 AM

how the f are the passwords not encrypted?

People designing and implementing should be shot for not encrypting password...

daPhoenix · Oct 14, 2014, 04:07 AM

It's not necessarily leaked from DropBox but from password harvesters and other services where people use the same username / password.

**nutcrackr** · Oct 14, 2014, 04:21 AM

droopybox said it's passwords from other sites

best to never use the same passwords across sites

Shadowless · Oct 14, 2014, 07:59 AM

smh. Every day that passes the more and more I realize I should just make my own datacenter and host everything in house, since it seems to be the only way **** won't get hacked

Razeus · Oct 14, 2014, 08:35 AM

Quote:

Originally Posted by Shadowless

smh. Every day that passes the more and more I realize I should just make my own datacenter and host everything in house, since it seems to be the only way **** won't get hacked

What's the best way to do this?

Shadowless · Oct 14, 2014, 08:37 AM

Quote:

Originally Posted by Razeus

What's the best way to do this?

There's software you can buy that allows you to setup a private cloud, I can't remember the name off the top of my head but it's a bit pricey because it's meant for enterprise class use.

sittal · Oct 14, 2014, 08:43 AM

Quote:

Originally Posted by Razeus

What's the best way to do this?

Get some space at a datacenter, borrow the old Rage3D hardware, install FTP client, bam!

badboy · Oct 14, 2014, 08:44 AM

Quote:

Originally Posted by Shadowless

There's software you can buy that allows you to setup a private cloud, I can't remember the name off the top of my head but it's a bit pricey because it's meant for enterprise class use.

its not expensive.. I can have my own private cloud on my synology diskstation.

**Munkus** · Oct 14, 2014, 08:50 AM

I haven't used dropbox in a long time, so I logged in (had to reset password since I forgot it) and found someone else's pictures in my private folder. No idea who they are.

And no, sorry, no nude selfies. Just random family pics of people I've never met.

Dropbox account deleted.

Shadowless · Oct 14, 2014, 08:52 AM

Quote:

Originally Posted by badboy

its not expensive.. I can have my own private cloud on my synology diskstation.

That means you have to own a Diskstation. And I've had issues getting FileStation to work on my mobile devices for some reason.

**G.I.BRO** · Oct 14, 2014, 09:19 AM

This is also why you dont use 3rd party services to such private info. Use the legit apps for said services and thats it.

IMO Every service will get hacked at some point, its just the way it is; Practice safe procedures, enabled 2 tier authentication (pain in the ass at times i know) and change your pw often.

I would love to use my own cloud service, but;

1. Ive been bitten in the ass a few times where i needed something but couldnt access my home for various reasons.
2. Your home is probably easier to hack than profesh services. Granted you are less likely to get hit because you are off of peoples radars, but youll be surprised on how many people are scanning for holes.

Unfortunately there is no perfect solution, other than not using cloud at all, so choose what you think protects you the most and use safe practices.

Also, if youre going to post nudes be smart and dont put your face in the same pic. Just sayn

Shadowless · Oct 14, 2014, 09:27 AM

Quote:

Originally Posted by **G.I.BRO**

This is also why you dont use 3rd party services to such private info. Use the legit apps for said services and thats it.

IMO Every service will get hacked at some point, its just the way it is; Practice safe procedures, enabled 2 tier authentication (pain in the ass at times i know) and change your pw often.

I would love to use my own cloud service, but;

1. Ive been bitten in the ass a few times where i needed something but couldnt access my home for various reasons.
2. Your home is probably easier to hack than profesh services. Granted you are less likely to get hit because you are off of peoples radars, but youll be surprised on how many people are scanning for holes.

Unfortunately there is no perfect solution, other than not using cloud at all, so choose what you think protects you the most and use safe practices.

Also, if youre going to post nudes be smart and dont put your face in the same pic. Just sayn

That's why I use enterprise grade everything.

Hyrax · Oct 14, 2014, 06:50 PM

Quote:

Originally Posted by Shadowless

That's why I use enterprise grade everything.

**G.I.BRO** · Oct 14, 2014, 10:47 PM

Quote:

Originally Posted by Shadowless

That's why I use enterprise grade everything.

True but there are still unforeseen issues that one cannot control, like neighbours cutting your isp line then needing to wait 24hr for the repair to come out. Power and isp outages for 5+ hrs...etc Sounds odd and highly unlikely, but thats happened to me (plus other issues this yr alone when needing something highly important) so i find that relying on professional cloud services (MS, Google, dropbox, box) are more reliable for me. Knowing that any company is at risk, i keep different things on different services to try to limit the damage if ive been compromised.

Cant stress enough about 2 step auth tho, i also dig how some services tell you what devices (mobile and pc) have accessed your account so you can see if anything funky is going on. Its part of my routine to check that history.

***Lupine*** · Oct 14, 2014, 11:36 PM

Hundreds? LOL.

Changed my dropbox pwds, and enabled 2 step. Not sure why I hadn't done that w/ dropbox yet, and am systematically going through all my accounts to enable 2 factor on everything possible.

Silent-Runner · Oct 15, 2014, 03:54 AM

maybe we should just rename the "internet" to "leaknet"......

Sundance Kid V2 · Oct 16, 2014, 03:44 AM

Quote:

Originally Posted by Silent-Runner

maybe we should just rename the "internet" to "leaknet"......

or just remove all passwords

free for all

KAC · Oct 16, 2014, 03:46 AM

Any nudies of celebs found.

RFtinkerer · Oct 16, 2014, 02:52 PM

Uh-oh, somebody must have found my nudes! *blush* I bet they're all over the internet, now, right?

Wait, no? ...man, I had some ART in there.

badboy's System Specs
Motherboard	Asus P8Z68-V Pro/GEN3
CPU	Intel Core i7 [email protected]
Graphics	ASUS GeForce GTX 970 STRIX 4GB DirectCU II OC
Memory	Corsair XMS3 Vengeance 2x4GB
Cooling Solution	Hyper 212 Evo
Display	DELL 23'' LED U2312HM
Soundcard & Speakers	Realtek
Hard-Drives	Intel X25-M G2 160GB, Samsung 840 EVO Series 500GB
Optical Drives	-
Power Supply	Corsair CMPSU-750AX 750W
Case	Antec P280
Input Devices	Microsoft Sidewinder X4, Saitek Cyborg R.A.T. 7
Operating System	Windows 10 x64
Extra Info	Oculus Rift + Touch

Sundance Kid V2's System Specs
Motherboard	ASUS A8N5X
CPU	Intel i7 950
Graphics	Some GTX 1070
Memory	6 GIG
Display	19" & 17" Dual display
Soundcard & Speakers	SB Xi-Fi Gamer
Hard-Drives	Seagate 2TB
Optical Drives	BenQ DL.
Power Supply	450 AOpen
Input Devices	Some MS Keyboard
Operating System	W10 64

Oct 14, 2014, 04:07 AM	#3
daPhoenix Snow White Nurse Join Date: Feb 2003 Location: European Union Posts: 13,044	It's not necessarily leaked from DropBox but from password harvesters and other services where people use the same username / password. __________________ :: We are all the sum of our tears. :: Too little and the ground is not fertile and nothing can grow there. :: Too much and best of us is washed away.

daPhoenix's System Specs
CPU	Ryzen 3900X
Graphics	MSI GeForce RTX 2080 VENTUS 8G
Memory	32GB
Display	3 x AOC Agon AG273QCX
Hard-Drives	1xSamsung 970 PRO 1TiB M.2 && 2xSamsung 970 EVO 1TiB
Input Devices	Apple Aluminium + Apple Magic Mouse

nutcrackr's System Specs
Motherboard	GB X570 UD rev1 (F33c)
CPU	AMD Ryzen 5 3600
Graphics	XFX RX 480 GTR Black 1338mhz [21.12.1]]
Memory	16GB G.SKILL DDR4-3200
Display	Samsung Syncmaster 2494HS 1920x1080 @ 24 inches
Soundcard & Speakers	Onboard Realtek ALC887 + Altec Lansing BXR1221 + Razer Blackshark V2 X
Hard-Drives	(8.5TB) 500GB SSD 970 Evo Plus, 1TB Corsair MX500, Samsung 1TB, Seagate 2TB, WD Passport 4TB
Optical Drives	iHBS212 LiteON Blu Ray Writer, Pioneer 215 DVD+RW
Power Supply	Cosair TX-750W
Case	Antec 1080 AMG
Input Devices	MS Digital Media Pro, Logitech MX518 mouse
Operating System	Windows 10 Pro (21H1)
Extra Info	AverTV Capture HD

Oct 14, 2014, 04:05 AM	#2
Sundance Kid V2 Your daddy! Join Date: May 2003 Location: F-cked SA Posts: 29,543	how the f are the passwords not encrypted? People designing and implementing should be shot for not encrypting password...

Oct 14, 2014, 04:21 AM	#4
nutcrackr OT Moderator Join Date: Aug 2003 Location: over the rainbow, way up high Posts: 16,839	droopybox said it's passwords from other sites best to never use the same passwords across sites

Oct 14, 2014, 07:59 AM	#5
Shadowless Deez Nuts Join Date: Apr 2003 Location: Long Island, NY Posts: 26,414	smh. Every day that passes the more and more I realize I should just make my own datacenter and host everything in house, since it seems to be the only way ** won't get hacked __________________ Gaming PC - MSI MPG Gungnir 111M \| MSI MAG Z590 Tomahawk Wifi \| Intel Core i7 11700K \| Corsair H100i RGB Pro XT \| 2x16GB Corsair Vengeance LPX 3200 \| 1TB Intel 670p \| 2TB Samsung 860 EVO \| PNY GeForce RTX 3070 XLR8 Gaming REVEL \| Sound Blaster X AE-5 Plus \| SeaSonic Focus GX-750 \| Acer ET322QU \| Windows 10 Pro Second PC** - Corsair Carbide SPEC-02 Redshift \| ASUS ROG Crosshair VI Hero \| AMD Ryzen 7 1700X \| Cooler Master Hyper 212 Evo \| 2x8GB Corsair Vengeance LPX 3200 \| 512GB Intel 660p \| 2TB SATA HDD \| MSI GeForce GTX 1080 Armor OC \| Thermaltake ToughPower Grand RGB 750W \| Acer ET322QU \| Windows 10 Pro

Shadowless's System Specs
Motherboard	MSI MAG Z590 Tomahawk
CPU	Intel Core i7 11700K
Graphics	PNY GeForce RTX 3070 8GB XLR8 Gaming REVEL
Memory	2x16GB Corsair Vengeance LPX 3200mhz
Cooling Solution	Corsair H100i RGB Pro XT
Display	Acer 32" IPS Display
Soundcard & Speakers	Sound BlasterX AE-5+, Logitech Z-2300, Astro A40 TR Gen4, Astro Mixamp Pro TR
Hard-Drives	1TB Intel 670p, 2TB Samsung 860 EVO
Power Supply	SeaSonic Focus GX-750
Case	MSI MPG Gungnir 111M
Input Devices	Logitech G413, Razer Viper Ultimate
Operating System	Windows 10 Pro

sittal's System Specs
CPU	i7 4790k
Graphics	EVGA 980
Memory	32GB
Display	HannsG 27in
Hard-Drives	1TB Intel SSD
Input Devices	Logitech G500/G510
Operating System	Windows 8.1

Oct 14, 2014, 08:50 AM	#10
Munkus Official taste-tester Join Date: Aug 2004 Location: Big Sky Country Posts: 28,725	I haven't used dropbox in a long time, so I logged in (had to reset password since I forgot it) and found someone else's pictures in my private folder. No idea who they are. And no, sorry, no nude selfies. Just random family pics of people I've never met. Dropbox account deleted. __________________ “The best thing about the future is that it comes one day at a time.” – Abraham Lincoln

Oct 14, 2014, 09:19 AM	#12
G.I.BRO Berwip crawna-wi pinibon Join Date: Nov 2000 Location: Mississauga Posts: 30,202	This is also why you dont use 3rd party services to such private info. Use the legit apps for said services and thats it. IMO Every service will get hacked at some point, its just the way it is; Practice safe procedures, enabled 2 tier authentication (pain in the ass at times i know) and change your pw often. I would love to use my own cloud service, but; 1. Ive been bitten in the ass a few times where i needed something but couldnt access my home for various reasons. 2. Your home is probably easier to hack than profesh services. Granted you are less likely to get hit because you are off of peoples radars, but youll be surprised on how many people are scanning for holes. Unfortunately there is no perfect solution, other than not using cloud at all, so choose what you think protects you the most and use safe practices. Also, if youre going to post nudes be smart and dont put your face in the same pic. Just sayn

G.I.BRO's System Specs
Motherboard	Giga Aorus Master x570
CPU	AMD 3900x
Graphics	Asus Strix R9 390 8GB
Memory	32GB Corsair
Display	Asus PB278
Soundcard & Speakers	BT LG SK10y
Case	Fractal Define R5

Hyrax's System Specs
Motherboard	Gigabyte Intel Board
CPU	Intel 7300
Graphics	GTX 285
Memory	2x2GB patriot
Display	22 in
Soundcard & Speakers	Realtek, headphones
Hard-Drives	WD 100GB and 500GB and SSD
Optical Drives	Bluray burner
Power Supply	500 Watt Coolmaster
Case	Silverstone
Input Devices	5 dolla mouse and plain logitechkeyboard
Operating System	8
Extra Info	smarter than your average bear

Oct 14, 2014, 11:36 PM	#16
*Lupine* Administrator Join Date: Sep 2002 Location: where I stand Posts: 32,684	Hundreds? LOL. Changed my dropbox pwds, and enabled 2 step. Not sure why I hadn't done that w/ dropbox yet, and am systematically going through all my accounts to enable 2 factor on everything possible.

Lupine's System Specs
Motherboard	MSI B550 Tomahawk AM4
CPU	Ryzen 7 3700X
Graphics	Radeon RX 480
Memory	32GB Ballistix Sport LT DDR4 3200
Display	Dell S220DGF / LG QHD
Hard-Drives	OS: Samsung 970 EVO 1TB
Power Supply	Seasonic Focus GX-750
Case	Fractal Design Define R6
Operating System	Windows 11 Pro

Oct 15, 2014, 03:54 AM	#17
Silent-Runner nulli secundus Join Date: Aug 2003 Location: Crazy Krautland-Hessen Posts: 20,306	maybe we should just rename the "internet" to "leaknet"...... __________________ ▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬ஜ۩۞۩ஜ▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬ "Time is the school in which we learn, Time is the fire in which we burn. Delmore Schwartz ▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬ஜ۩۞۩ஜ▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬

Silent-Runner's System Specs
Motherboard	MSI Z87-G41 Z87 LGA1150
CPU	INTEL Core i5 4570 4x 3.20 GHz 6MB
Graphics	3072MB HIS R9 280X iPower ICEQ X2
Memory	2 x 8GB DDR3-1600 Kingston
Cooling Solution	Alpenföhn Sella 92mm
Display	Samsung G7 32"
Soundcard & Speakers	SB Creative X-Fi extreme Gamer, Logitech Z-5500
Hard-Drives	2x 2.0TB WD Caviar Green WD20EZRX 64MB , 1x 120GB Samsung SSD EVO SATA III
Optical Drives	LG 22x+/- RW schwarz SATA
Power Supply	700W be quiet Straight Power
Case	Zalman Z3 USB 3.0 Black
Input Devices	Razer Ouroboros Elite Mouse, Optimus Maximus Keyboard
Operating System	Win10 Pro 64
Extra Info	Running like ****

Oct 16, 2014, 03:46 AM	#19
KAC Whatever Join Date: Apr 2003 Location: Lahore Posts: 67,148	Any nudies of celebs found.

KAC's System Specs
Motherboard	MSI MAG X570 Tomahawk
CPU	AMD Ryzen 9 5900X @ 5.15 Gs
Graphics	EVGA RTX 3090 Ti FTW3 Ultra @ 2.1 Gs
Memory	32 GB G Skill Trident Z NEO RGB @ 3733 C14
Cooling Solution	Corsair H150i Pro @ Quiet
Display	LG 55” CX OLED \| Samsung Odyssey G7 32”
Soundcard & Speakers	Logitech G332
Hard-Drives	MP600 XT 1TB, 660P 1TB, MX500 1TB, 850 EVO 1TB, 840 EVO 512, 830 256 GB
Optical Drives	Dafuq dat optical drive?
Power Supply	EVGA G2 1300 W
Case	Lian Li 011D EVO
Input Devices	Logitech G502 \| Corsair K70 MK 2 RGB
Operating System	Windows 11 Pro
Extra Info	Still pounding your mums

Oct 16, 2014, 02:52 PM	#20
RFtinkerer Not with it Join Date: Feb 2003 Location: N38 51.279 W94 47.951 Posts: 7,725	Uh-oh, somebody must have found my nudes! blush I bet they're all over the internet, now, right? Wait, no? ...man, I had some ART in there. __________________ The heart of the wise inclines to the right, but the heart of the fool to the left. - Ecclesiastes 10:2

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Dropbox Skydrive?	Vanz_007	Off Topic Lounge	7	Oct 16, 2012 12:29 PM
6.5 million LinkedIn passwords reportedly leaked online	Tork64	Off Topic Lounge	12	Jun 8, 2012 07:36 PM
BNP member list leaked online - racists NOT happy	kepler	Off Topic Lounge	46	Nov 20, 2008 01:34 AM
Eve Online Source Code Leaked	badboy	PC Gaming	16	Apr 21, 2008 06:26 PM
Super Mario Galaxy Leaked Online	Hidavi	Console Gaming	26	Nov 4, 2007 10:51 PM