We are aware of the issue with the badge emails resending to everyone, we apologise for the inconvenience - learn more here.
Fake activity?
Yesterday I uploaded a movie file to Dropbox for some friends to download. Immediately after, I decided to check from a browser that wasn't logged in, to see what it would look like for them if they didn't have a Dropbox account. I was shocked to discover, under “Activity”: “Patricia Johnson downloaded this file” and “Anthony Abate viewed this file” (neither name recognised by me): So, then I logged in to investigate, but only saw “Traffic and insights: See who’s visiting... Upgrade to Dropbox Professional to start tracking.”: Surely this isn’t a scare tactic to get me to upgrade to a paid account, is it??
Can a public share link or direct download link be 'hacked' to see other files in folder?
Hi there, We have sensitive files that we'd like to share individually with clients via a direct download link (https://...dl.dropboxusercontent.com/...). Unfortunately, we're unable to share the files via any other method due to how our business systems currently work. Our clients are NOT members of our Dropbox folder - we don't want them to be able to see any file other than ones we explicitly link to them. First, we had to turn off the 'Link restrictions' setting which typically prevents non-members from accessing the folder (and the files within it) via a link. Does this make our Dropbox any more likely to be 'hacked' by anyone acting maliciously? Second, is the direct download link (https://...dl.dropboxusercontent.com/...) secure so that no client nor any member of public can manipulate the link to view other files within parent folder(s) or even view the directory of files?
