Windows 10: Attackers can access Dropbox, Google Drive, OneDrive files without PW.

This. It is noticable that quite a lot of the most "catastrophic" attacks (can-do-anything style) start with either fysical access to the PC or getting a malware/virus/trojan in the first place, because without it....

 

I am not worried about this. The cloud has saved my butt so many times! Plus, like the couple of previous comments, there is something I would need to do first to allow this exploit.

 

Hi there

The expression "Cloud Cuckoo Land" was obviously created with these services in mind.

In any case I often use machines NOT 100% TETHERED to the internet. What some of these cloud services REALLY want to do is sucker you in so you rely on them and then they'll start charging you.

If you MUST use these services just hold data on it that you really don't care if others can grab it. Never keep personal data / Bank details / passwords / addresses etc etc. on them.

If you take sufficient LOCAL backups your data and system should always be safe.

Cheers
jimbo

 

That's right, as most have already said, this is really not a problem unless you log in and put data there, otherwise just ignore it.

However for those people who insist and still want to uninstall it (not that you need to) ...there is a way.
(note though, any OS upgrade or major update you do (I've not tested SFC yet) will just install it again, but no problem you can just simply run the uninstaller again - tested, works well, for many months now)

See Here

 

I'll just like to add. If an attacker can get this token file for one of your cloud storage solutions. Do you really think they will bother with that? Because you may not know this, but why would they bother getting a token file when they can just download your passwords instead? Either directly from your browser or from whatever application you are using to store your passwords.

You see the moment an attacker as system level access to your computer, it is game over. They can do anything and get anything from you that they want. Waste time downloading some token file when they can get all the keys to the kingdom? Your best option is to avoid letting an attacker on your system in the first place.

Second. Where ever you can enable two-factor authentication. It may be annoying at first but it will save your butt from someone trying to log into your account from an unknown source.

 

I will remove Onedrive, just use a passport 1T I think its

 

Onedrive should have been uninstallable. But MS didnt think. So now its a not only Malware, its a huge security risk. I bought Home for my other computer, we'll see if Onedrive is deletable again. I had to delete it in Win8.1.

What I wanna know is why 10 has to be connected to the internet to create alternate User accounts.

 

I just realized how vulnerable we are, I will try to delete all cloud services, I feel so unsafe now

 

If you want to stay safe get rid of your router and buy all your programmes from a shop, oh and get rid of any smartphones and tablets.

 

@BillyBob - *Roflmao2 Seriously, that's about it in a nutshell.
@Alboari - Cloud services are not as vulnerable as you think. For instance, with the latest vulnerability, someone has to infiltrate your device to grab the "token" to access your cloud. So, #1 if you have 2-factor authentication enabled, you have just overcome this vulnerability, and, #2 if they've hacked your device, don't you think they'd want to grab everything and not just your token? Really, you can calm down, it's not as bad as it sounds. Keep your devices safe and your cloud should be safe. (Although, I admit, we have no control over the safety put in place by the cloud servers...)

 

thanks billybob I will use 2-factor authentication enabled as suggested