<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>RossDurham.com</title>
	<atom:link href="http://rossdurham.com/feed/" rel="self" type="application/rss+xml" />
	<link>http://rossdurham.com</link>
	<description>Life is short... feed your mind!</description>
	<lastBuildDate>Sun, 10 Mar 2013 12:14:56 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.5.1</generator>
		<item>
		<title>Dropbox Privacy Fail</title>
		<link>http://rossdurham.com/2013/03/10/12/dropbox-privacy-fail/</link>
		<comments>http://rossdurham.com/2013/03/10/12/dropbox-privacy-fail/#comments</comments>
		<pubDate>Sun, 10 Mar 2013 11:36:10 +0000</pubDate>
		<dc:creator>Ross Durham</dc:creator>
				<category><![CDATA[Technology]]></category>
		<category><![CDATA[contacts]]></category>
		<category><![CDATA[dropbox]]></category>
		<category><![CDATA[google]]></category>
		<category><![CDATA[privacy]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[yahoo]]></category>

		<guid isPermaLink="false">http://rossdurham.com/?p=12</guid>
		<description><![CDATA[Remember the privacy fails of Twitter, Facebook, and Tumblr? What about Dropbox&#8217;s similar breach involving contacts? If you are an older user of Dropbox and initially invited friends from Google, you may find that your Google contacts of &#8216;ol are still accessible via the Dropbox email referral system. This may very well include Yahoo contacts however for [...]]]></description>
				<content:encoded><![CDATA[<p>Remember the privacy fails of Twitter, Facebook, and Tumblr? What about Dropbox&#8217;s similar breach involving contacts?</p>
<p>If you are an older user of Dropbox and initially invited friends from Google, you may find that your Google contacts of &#8216;ol are still accessible via the Dropbox email referral system. This may very well include Yahoo contacts however for myself, I have only previously used Google for contact import.</p>
<p>In an attempt to replicate this, follow these steps:</p>
<p>1. Log into your Dropbox account. From the home page, click the link at the top which says &#8220;Get free space!&#8221;.</p>
<blockquote><p><a href="http://rossdurham.com/2013/03/10/12/dropbox-privacy-fail/1-dropboxhomelink/" rel="attachment wp-att-20"><img class="alignnone size-medium wp-image-20" alt="Dropbox Privacy #1: &quot;Get free space!&quot; on Dropbox home page" src="http://rossdurham.com/wp-content/uploads/2013/03/1-dropboxhomelink-300x113.jpg" width="300" height="113" /></a></p></blockquote>
<p>2. A new page will open (https://www.dropbox.com/getspace) displaying the options available on your account allowing you to gain additional space. Click the &#8220;Refer friends to Dropbox&#8221; link to continue.</p>
<blockquote><p><a href="http://rossdurham.com/2013/03/10/12/dropbox-privacy-fail/2-getmorespace-2/" rel="attachment wp-att-21"><img class="alignnone size-medium wp-image-21" alt="Dropbox Privacy #2: &quot;Refer friends to Dropbox&quot; on Get more space page" src="http://rossdurham.com/wp-content/uploads/2013/03/2-getmorespace1-300x215.jpg" width="300" height="215" /></a></p></blockquote>
<p>3. You will then continue to the Dropbox Referrals page (https://www.dropbox.com/referrals). Select &#8220;Invite your email contacts&#8221; in order to&#8230; surprise&#8230; invite your email contacts!</p>
<blockquote><p><a href="http://rossdurham.com/2013/03/10/12/dropbox-privacy-fail/3-inviteemailcontacts-2/" rel="attachment wp-att-22"><img class="alignnone size-medium wp-image-22" alt="Dropbox Privacy #3: &quot;Invite your email contacts&quot; on Refer friends to Dropbox" src="http://rossdurham.com/wp-content/uploads/2013/03/3-inviteemailcontacts1-300x154.jpg" width="300" height="154" /></a></p></blockquote>
<p>4. This is where your selection may vary. Seeing as I use Google for email services, I selected Google. I have not tested this issues with Yahoo, however you may experience the same results using a Yahoo account.</p>
<blockquote><p><a href="http://rossdurham.com/2013/03/10/12/dropbox-privacy-fail/4-invitegmailcontacts-2/" rel="attachment wp-att-23"><img class="alignnone size-medium wp-image-23" alt="Dropbox Privacy #4: Select Gmail from invite your email contacts" src="http://rossdurham.com/wp-content/uploads/2013/03/4-invitegmailcontacts1-300x177.jpg" width="300" height="177" /></a></p></blockquote>
<p>5. Dependent upon your selection, a window will appear requiring your authorization to connect to your messaging service. &#8220;Allow access&#8221;, and Dropbox will subsequently load your contacts from your email service.</p>
<blockquote><p><a href="http://rossdurham.com/2013/03/10/12/dropbox-privacy-fail/5-googleallowaccess/" rel="attachment wp-att-26"><img class="alignnone size-medium wp-image-26" alt="Dropbox Privacy #5: Allow Dropbox access to Google contacts" src="http://rossdurham.com/wp-content/uploads/2013/03/5-googleallowaccess-300x186.jpg" width="300" height="186" /></a></p></blockquote>
<p>6. If you have previously authorized Dropbox to access your contacts in order to send referrals, you may possibly be presented with a list containing your current contacts in addition to your previously referred contacts.</p>
<blockquote><p><a href="http://rossdurham.com/2013/03/10/12/dropbox-privacy-fail/6-googleloadedcontacts/" rel="attachment wp-att-27"><img class="alignnone size-medium wp-image-27" alt="Dropbox Privacy #6: Loaded contacts on Dropbox from Google contacts" src="http://rossdurham.com/wp-content/uploads/2013/03/6-googleloadedcontacts-300x271.jpg" width="300" height="271" /></a></p></blockquote>
<p>My concern with this system is due to the fact that in Google, I recognized I actually had no contacts. (This is due to changes I made because of synchronization with iCloud, my iPhone, and Google Voice. I decided to delete my contacts from Google as I was receiving multiple copies of my contacts.) Why were 252 contacts loaded by Dropbox when no contacts actually existed.</p>
<p>If the contacts were previously emailed via Dropbox on my behalf in order to refer services, these contacts should be securely saved for cross-reference to provide the appropriate bonus space. In no way do I doubt the need for such a system. I do not believe it is in any way secure to display these email addresses and names when the contacts are not present in the service contacts.</p>
<p>Any feedback on this issue would be appreciated.</p>
<p>&nbsp;</p>
]]></content:encoded>
			<wfw:commentRss>http://rossdurham.com/2013/03/10/12/dropbox-privacy-fail/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
