compromised? stolen mac timemachine disk - what does "localdomain" mean in 'connected devices' list?

Hi neilBar 

If its asked to reconnect after you disconnected it, no, you are not in trouble its the same device connected again, 

Note that there is no way anybody could use your Time Machine discs to connect to Dropbox - they would need the actual username and password. 

Hi Mark

thanks for helping

to clarify - 

the device that was listed as connected was "ChristopersMBP4.localdomain"

I dumped it,

Now the mini is logged in connected as: "neils-mini.local"  

not as ".localdomain"

Doyou still think it’s the same device? why the different name and .local -v- .localdomain?

I'd love to know how "localdomain" differs from "local" 

Would "ChristopersMBP4.localdomain" have to be on my network? Other macs here show as just - .local

I think they could theoretically log into dropbox because of saved browser passwords - its scaring me that someones in my data

thanks lots for the help

The simple answer is 'thats what your Mac was called at that time'. Updating the OS can change that. There is nothing sinister about it. 

If they have access to saved browser info then changing will help but you also need to update things like emails etc. Consider 2FA as well.

Hi Mark

thanks

"The simple answer is 'thats what your Mac was called at that time'"

but I never had a mac called: ChristopersMBP4 its lookin glike it was someone else in my Dropbox

and I'd still like to know why it was labelled "localdomain" wheras my others are "local"

yeah I'm doing 2FA where its available

good of you to help

neil

---

neilBar wrote:

Hi Mark

and I'd still like to know why it was labelled "localdomain" wheras my others are "local"

Because thats what your Mac was called at the time you installed it. 

Hi Mark

thanks for trying but my mac was never called ChristopersMBP4, there's no Christopher in my family

Hi, I have suffered a data breach, some backup disks were stolen.

I spotted a Mac I don't recognize connected to my Dropbox account in: Dropbox settings/security/devices.

I believe that the thieves COULD have cloned my Mac using my Time Machine backups to restore a machine, that way they'd have my browser saved passwords. So before I changed the passwords they COULD have accessed my dropbox acct online.

My own connected Macs are listed there as "XXX.local", but this one was listed as "ChristopersMBP4.localdomain".

There's no Christopher here, No Mac here was never named that way.

I am finding it hard to understand what " localdomain" -v - "local" means in this context - if anyone knows I'd be very grateful.

Here's a screenshot when it was connected, I binned it immediately.

All my own macs are connected now - as XXX.local

thanks

Hi neilBar 

As I said on the other thread there is no difference at all other than what the device itself is called. The names are just pulled direct from what Apple has named the machine. There is nothing more than this. There is no complicated naming convention other than pulling what the device, in System Admin, is called. 

---

neilBar wrote:

Hi Mark

 

thanks for trying but my mac was never called ChristopersMBP4, there's no Christopher in my family

---

In that case your account has possibly been compromised and set up as a new user (from the stolen drives?). 

The names on the screen are simply what the user account/devices are set up as.

Thanks Mark

this thread is getting complex as my earlier one seems to be mixed into it.

you wrote:

"The names on the screen are simply what the user account/devices are set up as."

BUT there was never a Mac on my account with that name - which is why I suspect it's someone else. 

I still can't find out what ".localdomain" versus "local" means in that Dropbox devices list, my own Macs are listed as local, but the one I don't know was listed as 'chrisopersMBP4.localdomain'

Any chance this could get escalated to official support please? Unfortunately, I only use a free plan as I don't use Dropbox much

thanks for trying,

I just can't grasp why a Mac name would appear, which I never owned and never set up

This is pretty serious because IF someone else was logged in (I believe they could get the Dropbox password from browser saved log ins) then I really am in trouble.

here's the screenshot again

Neil