Attackers can access Dropbox, Google Drive, OneDrive files without a user's password

The so-called "man-in-the-cloud" attack is said to be a common flaw in most cloud-based file synchronization services.

http://www.zdnet.com/article/dropbox-google-drive-onedrive-files-man-cloud-attack/?tag=nl.e539&s_cid=e539&ttag=e539&ftag=TRE17cfd61