Read time: 0 minutes

Dropbox And Box Respond To Link-sharing Privacy Glitch

The company claimed it found tax returns, bank records, mortgage applications, blueprints and business plans, some of which it said were "perhaps sufficient for identity theft".
Dropbox And Box Respond To Link-sharing Privacy Glitch

Via The Inquirer:

users are inadvertently exposing their personal data to all and sundry due to a security flaw in public link URLs.

Enterprise collaboration company Intralinks has gleefully reported the discovery made by its team during a "routine analysis of Google Adwords and Google Analytics data".

Hidden within the links were direct public URLs to documents in Dropbox and Box that could be clicked through, and in turn lead to the folder content pages, allowing any visitor full folder access.

The company claimed it found tax returns, bank records, mortgage applications, blueprints and business plans, som...

Continue reading...

Can you help us out?

For 17 years we have been exposing Washington lies and untangling media deceit, but now Facebook is drowning us in an ocean of right wing lies. Please give a one-time or recurring donation, or buy a year's subscription for an ad-free experience. Thank you.

More C&L Coverage

Discussion

New Commenting System

Our comments are now powered by Insticator. In order to comment you will need to create an Insticator account. The process is quick and simple. Please note that the ability to comment with a C&L site account is no longer available.

We welcome relevant, respectful comments. Any comments that are sexist or in any other way deemed hateful by our staff will be deleted and constitute grounds for a ban from posting on the site. Please refer to our Terms of Service (revised 3/17/2016) for information on our posting policy.

Please Do Not Use the Login Link at the Top of the Site.

In order to comment you must use an Insticator account. To register an account, enter your comment and click the post button. A dialog will then appear allowing you create your account.

We will be retiring our Crooks and Liars user account system in January, 2021.

Thank you.
C&L Team