You might see that the Dropbox Community team have been busy working on some major updates to the Community itself! So, here is some info on what’s changed, what’s staying the same and what you can expect from the Dropbox Community overall.
External users prompted to join team when shared a file
Dirty practice from Dropbox to prompt a recipient of a shared file to be asked to join your team. This prompt confuses the recipient of the file who requests to join the team and therefore Dropbox gains another paid user. This user (from another company) if added to the team by an overworked I.T. dept who isn't paying attention, then gains access to the company files. Please re-work your prompt system and remove the option to request access to join the team. We can add members to the team from the admin console and this is the most secure way to do this. This fault is obviously a great way for Dropbox to gain 'accidental' paid users at the expense of security. I receive a few of these emails each month and each time it's just Dropbox testing myintelligence again to see if I will accidentally add a totally random person to access our company files by mistake. This is absolutely not secure file storage and is designed to be misleading. It is frustrating that Dropbox is actively phishing. Disabling the ability of a user to request to join a team (from outside your company) would resolve this. It is hard to imagine a scenario where you would want to add (and pay for) an external user to your team. If you did need this feature, it would be a deliberate action and the cost involved would need to be approved (an ongoing subscription - the worst kind of cost). Email requests from external users would of course be ignored and make no impact on the purchase of the license. The current short term fix i can suggest is just setting Dropbox emails to block/spam/autodelete. Thanks for reading this far.
What is this shared file I see on my account?
First American Title [Removed as per Community Guidelines] invited you to view the file "Preliminary, Settlement Statement.pdf" on Dropbox. Has anyone seen something like this in their shared folder? I am not transacting any business or expecting any files from a title company.
Someone has sent me a request to access one of my Dropbox files. Is this email legit?
I received the following emal fromno-reply@dropbox.comand would like to know if it is ligit? How did this person actually know about this particular pdf? I thought all files in the Dropbox folder were private. fromno-reply@dropbox.com renae xxxx (xxxxxxx@gmail.com) wants to access your file "xxxxxxxLawsuit.pdf." Share this file with renae to let them view it.
I received a file from a suspicious sender - can I delete it permanently from my Dropbox account?
Hi. Received an invite to share a file from a business associate. Turns out this was not sent by them and the shared file is now sitting within my Dropbox account. If I remove myself from this shared file does this permanently remove the file from my account and any threat that may sit with it?Privacy Amongst Viewers of Data for sharing files
My colleague who is the Admin for the Dropbox account provided me edit rights. I was asked to share files with outside constituents and am now concerned that each of these outside members/viewers can actually see one another and their respective email addresses. Please advise asap. Thank You, Chris
How did somebody I don't really know, put a file in my shared folder?
I joined a kickstarter with the same email that I use for Dropbox. Later in the day I found a file in my shared folder that said it was from the project creator. The title was the same as the sample they had set up on the front page of the kickstarter. When I clicked on the 3 dots to get more info, it said I needed permission from a group with the same name as the kickstarter. I know better than to open a file from the internet, unless I am sure it's safe. The thing is that I thought I had set my shared files up to only get stuff by invitation only. I assume they got my email address from kickstarter, since I did back their product. But I didn't ask for the download & I didn't give them an invitation. I don't think there is any malice involver. But, I do want to know how they got it in my shared folder & what do I need to do to make sure it doesn't happen again.
