The interesting part is that it came through a legacy Lenovo ID authentication flow, not some crazy âencryption got brokenâ scenario.
Makes you wonder where the real weak point in cloud storage usually is â encryption, login, or third-party integrations?
4 Comments
HappyFrog@lemmy.blahaj.zone · 14 pts · 6d
I thought dropbox data was unencrypted by default, lol. I use Mega, and while I don't fully trust the company, I believe that my data is safe. Also, I feel like 5k accounts are sp few compared to the amounts we usually see, lol
Camila@lemmy.ml · 8 pts · 6d
True, 5k isnât huge compared to some breaches, lol. What caught my attention was that files were actually accessed in some of those accounts. Makes me wonder how much a storage provider should be able to expose if an account gets compromised in the first place.
urushitan@kakera.kintsugi.moe · 5 pts · 6d
Their defaults are AES256 at rest
https://www.dropbox.com/features/security
That being said, thatâs not end to end encrypted because they have the keys, so if someone breaks into their infrastructure, they break into the files. It moreso prevents the datacenter owner/someone acquiring drives from getting in.
They do have support for end to end encryption, but thatâs not included on their standard plans, you need to pay for the âAdvancedâ plan for that feature
kungen@feddit.nu · 3 pts · 6d
If you aren't the only one with the keys, it's basically unencrypted. Bake in your own encryption (rclone, cryptomator, etc), or treat it as unencrypted.