Windows 10: Attackers can access Dropbox, Google Drive, OneDrive files without PW.

Page 2 of 3 FirstFirst 123 LastLast

  1. Posts : 91
    64-bit 10240 10 Pro
       06 Aug 2015 #10

    It is history on my machine. I never like it anyway.
      My ComputerSystem Spec

  2.    06 Aug 2015 #11

    simrick said: View Post
    Two-factor authentication thwarts this.
    This^ It's even in the source. "There isn't a simple fix," he said. Although many services now offer two-factor authentication and notifications when unauthorized access is detected -- such as from a new computer or an entirely different geography -- Schulman said many people either ignore those notifications or choose not to do anything about them." Just do something about it. Turn on two step protection.
      My ComputerSystem Spec

  3.    06 Aug 2015 #12

    And to further add, the attacker has to get onto your computer first. In order to get that token file. So really the sky is not falling like some want to proclaim.
      My ComputerSystem Spec

  4.    06 Aug 2015 #13

    logicearth said: View Post
    And to further add, the attacker has to get onto your computer first. In order to get that token file. So
    really the sky is not falling like some want to proclaim.
    This. It is noticable that quite a lot of the most "catastrophic" attacks (can-do-anything style) start with either fysical access to the PC or getting a malware/virus/trojan in the first place, because without it....
      My ComputerSystem Spec

  5.    07 Aug 2015 #14

    I am not worried about this. The cloud has saved my butt so many times! Plus, like the couple of previous comments, there is something I would need to do first to allow this exploit.
      My ComputerSystem Spec

  6.    08 Aug 2015 #15

    Hi there

    The expression "Cloud Cuckoo Land" was obviously created with these services in mind.

    In any case I often use machines NOT 100% TETHERED to the internet. What some of these cloud services REALLY want to do is sucker you in so you rely on them and then they'll start charging you.

    If you MUST use these services just hold data on it that you really don't care if others can grab it. Never keep personal data / Bank details / passwords / addresses etc etc. on them.

    If you take sufficient LOCAL backups your data and system should always be safe.

      My ComputerSystem Spec

  7. endeavor's Avatar
    Posts : 74
    Vista/Win7/Win8/Win10 x86/x64
       08 Aug 2015 #16

    That's right, as most have already said, this is really not a problem unless you log in and put data there, otherwise just ignore it.

    However for those people who insist and still want to uninstall it (not that you need to) ...there is a way.
    (note though, any OS upgrade or major update you do (I've not tested SFC yet) will just install it again, but no problem you can just simply run the uninstaller again - tested, works well, for many months now)

    See Here
      My ComputerSystem Spec

  8.    09 Aug 2015 #17

    I'll just like to add. If an attacker can get this token file for one of your cloud storage solutions. Do you really think they will bother with that? Because you may not know this, but why would they bother getting a token file when they can just download your passwords instead? Either directly from your browser or from whatever application you are using to store your passwords.

    You see the moment an attacker as system level access to your computer, it is game over. They can do anything and get anything from you that they want. Waste time downloading some token file when they can get all the keys to the kingdom? Your best option is to avoid letting an attacker on your system in the first place.

    Second. Where ever you can enable two-factor authentication. It may be annoying at first but it will save your butt from someone trying to log into your account from an unknown source.
      My ComputerSystem Spec

  9.    09 Aug 2015 #18

    Cloud are not reliable

    I will remove Onedrive, just use a passport 1T I think its
      My ComputerSystem Spec

  10.    09 Aug 2015 #19

    Onedrive should have been uninstallable. But MS didnt think. So now its a not only Malware, its a huge security risk. I bought Home for my other computer, we'll see if Onedrive is deletable again. I had to delete it in Win8.1.

    What I wanna know is why 10 has to be connected to the internet to create alternate User accounts.
      My ComputerSystem Spec

Page 2 of 3 FirstFirst 123 LastLast

Related Threads
Onedrive deleted all my files in Software and Apps
Why onedrive deleted all my files? I had 20 mp3 on my hard disk after i restarted my pc onedrive deleted all of them and put in trash bin. Any help?
Anyway to do this? I don't use Onedrive at all, i do use Google Drive, i just want to replace that shortcut to lead to google drive instead of onedrive? maybe editing through regedit? Thanks everyone. 28808
Hello there, I just updated to Win 10 today from Win 8.1. I've got a DropBox account and app and I use it quite regularly but I'm thinking to try OneDrive since it should be 'more integrated' with the whole OS. I've got a doubt tho, I can...
Source: Google Drive Blog: Introducing the Google Drive plug-in for Microsoft Office Download: Google Drive plug-in for Microsoft Office
I am also asking this question on the Google Product Forums. Basically, the Google Drive folder is synced onto my data partition. Files are present on my HDD, the whole folder is indexed, but nothing inside it comes up in my Windows search...
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 21:31.
Find Us