Cloudy Days

On June 19 there was a four-hour security glitch at Dropbox. During that four-hour period anyone could log into any account with any password. If someone knew the email you used to login they could supply any password at all and it would work. Essentially it didn’t matter how powerful the encryption scheme Dropbox was using to secure your files was as the security flaw temporarily allowed anyone to login to your account and be authenticated as though they were you—a procedure that would bypass the strongest encryption in the world since the system believed the interloper was a valid user on the account. Here's a fix.