Does that mean that the current protocol allows users to steal arbitrary files given a hash?
For example if some web site charges per download of a file, but still has the hash posted publicly, you can try to "steal" it from someone who has it stored privately in Dropbox?
IOW, the file hash is equivalent to your account login/password combo [restricted to any given file]?
For example if some web site charges per download of a file, but still has the hash posted publicly, you can try to "steal" it from someone who has it stored privately in Dropbox?
IOW, the file hash is equivalent to your account login/password combo [restricted to any given file]?