Submission + - Dropbox Does Not Validate Mail Addresses For Accounts
I started receiving out of the blue several notifications of "my Dropbox account" being linked to several devices, none of which I could remember, prompting some doubt since I didn't remember having a Dropbox account in the first place. On reflex, I reinitialized the password and logged in to confirm the contents, realizing quickly that my homonym most likely messed up and would probably end up in a lot of trouble if they lost the data in their account.
I created a "Sorry for the trouble with your Dropbox, please read this" file, containing my whole explanation about what went on, and the matter was solved smoothly with a laugh from both parties ("Okay, so now what was MY GMail address?"), but it is sort of mind-boggling that Dropbox would allow setting an e-mail address, or even the creation of an active account, without requesting confirmation (sending an e-mail with an activation URL, or a code) !
This could even be used to plant Nasty Evidence on someone before tipping off the police and prompting an investigation, and most likely ruining their lives... At the time of writing I have sent a PR to Dropbox about this, hopefully this gets fixed quickly.