Arash Ferdowsi: A very small number of users (much less than 1 percent) logged in during that period, some of whom could have logged into an account without the correct password. It sounds like there was a four-hour window in which anyone could access your account. I’m not exactly sure what “very small” means here. … Continue reading Dropbox Authentication Bug