Hacker News Reader

Comment by filleokus | Hacker News Reader

Just guessing, but might they have had something in their EULA / TOS up until October 4:th 2012 that somehow forces them to keep the Public folder available? Maybe some language about how features are removed /deprecated, or about how changes in the EULA / TOS are allowed to be done, that makes it infeasible to do without breaking the contract?

View on HN

Maybe just coincidental, but while I was searching thru Dropbox mail looking for details for another reply here, I noticed this message from Aug 26th 2016:

"We’re reaching out to let you know that if you haven’t updated your Dropbox password since mid-2012, you’ll be prompted to update it the next time you sign in. This is purely a preventative measure, and we’re sorry for the inconvenience."

2012 was apparently when Dropbox had 68 million email addresses and hashed passwords compromised. It just took 4 years for anyone to find out about it.

Cynical-me wonders if this is because whoever got this passwords also got the backend source, and they've discovered security problems that're easier to fix by killing features than but actually fixing the code the attackers have?

Maybe here are the policies from 2009:

https://web.archive.org/web/20091228083110/http://www.dropbo...

And the policies from end of 2012:

https://web.archive.org/web/20121216094126/https://www.dropb...

That said, given the Terms of Use say they were last modified on March 26, 2012 — it appears possible that is not the reason.

Reply on news.ycombinator.com