Dropbox employee’s password reuse led to theft of 60M+ user credentials

Re:Dropbox employee’s password reuse led to theft of 60M+ us... by joshka on Wednesday August 31, 2016 @05:47AM (#12397156)

opsec 101 - don't use other people's devices / machines

[ Parent | on HN ]

Re:Dropbox employee’s password reuse led to theft of 60M+ us... by varjag on Wednesday August 31, 2016 @06:24AM (#12397250)

Do you never, ever, use devices not in your full possession?

[ Parent | on HN ]

Re:Dropbox employee’s password reuse led to theft of 60M+ us... by pop8row9 on Wednesday August 31, 2016 @08:20AM (#12397701)

Isn't that what you do?

If you have deals with many strangers do you not expect to get your hands dirty in some way?

[ Parent | on HN ]

Re:Dropbox employee’s password reuse led to theft of 60M+ us... by varjag on Wednesday August 31, 2016 @08:54AM (#12397914)

I definitely don't store my SSH keys on stranger computers. I however used passwords on my relatives or customers devices on numerous occasions. Don't pretend you never did, I'm not going to believe you.

[ Parent | on HN ]

Re:Dropbox employee’s password reuse led to theft of 60M+ us... by joshka on Wednesday August 31, 2016 @05:11PM (#12401510)

Sure, I've used other machines in the past. I prefer not to though in most circumstances and assume that any account / password that I use on said machine is compromised from then on.

This was something I changed when I realized that a tax related government agency's machine I was using about 10 years ago man in the middled SSL connections to my online banking. Who knows what was logged and what the retention on that was? I don't have time or the inclination to ensure every relative's / customer's devices are secure, so I use my own or go without.

[ Parent | on HN ]