We are aware of the issue with the badge emails resending to everyone, we apologise for the inconvenience - learn more here.

Forum Discussion

Threlly's avatar
Threlly
Collaborator | Level 8
5 years ago

Why So Much Telemetry ?

Hi All,   My Pi Hole is blocking an INCREDIBLE amount of DropBox telemetry, even more than Windows telemetry, and by a large margin. So I have a few questions. 1. What is this telemetry for ? 2....
Security
Sync
Third Party Integrations
anforowicz's avatar
anforowicz
New member | Level 2

Hello,

 

I am a Chrome Engineer, working for the Chrome Security team.  In Chrome 85, a security feature called CORS-for-content-scripts has shipped - after Chrome 85 content scripts can no longer bypass CORS, even if an extension has permission to the target host.  The Chrome 85 changes have been announced in March 2020 on chromium-extensions@ discussion list, as well as in Chrome Enterprise Release notes.

 

The "Dropbox for GMail" Chrome Extension has been identified as affected by Chrome telemetry in earlier Chrome versions.  An email notification to CWS@dropbox.com (the email registered in Chrome Web Store) was sent out in June 2020.  To avoid disruptions, the extension has been put on a temporary "allowlist" that exempts the extension from Chrome 85 changes (as we've announced earlier, the "allowlist" is being removed in Chrome 87).  Our manual testing indicates that the "Dropbox for GMail" Chrome Extension has not yet migrated to the new security model and will stop working in Chrome 87 (starting with version 87.0.4266.0, currently in the Chrome Canary channel).

 

Please migrate the "Dropbox for GMail" Chrome Extension to the new security model as soon as possible.  The tentative Chrome 87 release schedule is to ship to the Beta channel on 2020-10-15 and to start rolling out the Stable channel on 2020-11-17.  More details about the changes and migration guidelines are available at https://www.chromium.org/Home/chromium-security/extension-content-script-fetches.

 

Best regards,

 

Lukasz Anforowicz

Walter's avatar
Walter
Icon for Dropbox Staff rankDropbox Staff
5 years ago

Hi anforowicz; thanks for the extensive report and welcome to the Dropbox Community!

 

As I'd like to get this under the attention of one of our experts, would it be OK if I used the email address that's connected to your profile here on our Community to further investigate? 

 

Thanks a bunch, Lukasz. 

  • anforowicz's avatar
    anforowicz
    New member | Level 2
    5 years ago

    RE: would it be OK if I used the email address that's connected to your profile here on our Community to further investigate

     

    Sure, that should be totally ok.  Thank you for asking.

     

    -Lukasz

    • Walter's avatar
      Walter
      Icon for Dropbox Staff rankDropbox Staff
      5 years ago

      Thanks for the swift response, Lukasz. 

       

      I just sent you an email so we can investigate further. 

       

      Whenever you get the chance, please take a look at your inbox for my message and we'll take it from there.

About Integrations

Find solutions to issues with third-party integrations from the Dropbox Community. Share advice and help members with their integration questions.

Need more support

If you need more help you can view your support options (expected response time for an email or ticket is 24 hours), or contact us on X or Facebook.

For more info on available support options for your Dropbox plan, see this article.

If you found the answer to your question in this Community thread, please 'like' the post to say thanks and to let us know it was useful!