<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: File accessed time changed in Security and Permissions</title>
    <link>https://www.dropboxforum.com/t5/Security-and-Permissions/File-accessed-time-changed/m-p/692960#M9222</link>
    <description>&lt;P&gt;Hi Samantha.&amp;nbsp; Thank you!&amp;nbsp; Are you able to confirm I verified?&amp;nbsp; I logged off and logged in to my dropbox account on the portal but no verification email was sent nor did I expect one -- 2FA was in effect and I got a code on my cell.&amp;nbsp; I did not state the device was a trusted device.&amp;nbsp; I'll wait to hear from Dropbox privately.&amp;nbsp; It's possible you meant a verification email from the community blog which I believe is separate (I am using the same email however); not sure.&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Thank you so much!&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Harry&lt;/P&gt;</description>
    <pubDate>Mon, 19 Jun 2023 21:54:50 GMT</pubDate>
    <dc:creator>harryisthename</dc:creator>
    <dc:date>2023-06-19T21:54:50Z</dc:date>
    <item>
      <title>File accessed time changed</title>
      <link>https://www.dropboxforum.com/t5/Security-and-Permissions/File-accessed-time-changed/m-p/690234#M9077</link>
      <description>&lt;P&gt;Sorry if this is a repeat.&amp;nbsp; I went back in and could not find the original using Search. Label is 'Security'&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;When I do a dir /s /a: /o:d /TA c:\*.* I am observing the file access date and time is all over the place in Dropbox subfolders that I do not access at all - certainly haven't looked at them for years and years. There are no other machines connected to my Dropbox, just one, my machine. Everything had already been "revoked".&lt;/P&gt;&lt;P&gt;&lt;BR /&gt;That tells me either someone on my machine (virus) is accessing these files or someone at Dropbox is accessing them through the Dropbox service. Perhaps Dropbox does occasional sanity check true file comparisons and in between, it only looks at what Windows tells it changed combined with file size and date last modified on my machine vs. it's servers. If so, I'd like them to state that in documentation as it is disturbing to see the file accessed time changed all over the place and wonder who did this. No one else has physical access to my machine.&lt;/P&gt;&lt;P&gt;&lt;BR /&gt;Here is an example of a folder I have not looked at for 4 years. I have changed the file names for privacy.&lt;/P&gt;&lt;P&gt;&lt;BR /&gt;Directory of c:\Users\Admin\Dropbox\Final\2019\OLD&lt;BR /&gt;04/29/2022 05:42 PM 81,537 Chec..xlsx&lt;BR /&gt;03/20/2023 01:15 AM 555,250 2018 ...&lt;BR /&gt;04/11/2023 03:02 PM 3,077 payment1&lt;BR /&gt;04/22/2023 06:55 AM 11,933 payment1&lt;BR /&gt;05/18/2023 05:02 PM 553,498 YForm&lt;BR /&gt;05/21/2023 09:18 AM 74,490 Ledger.xlsx&lt;BR /&gt;06/03/2023 04:36 PM 2,979,840 SupportingInfo&lt;BR /&gt;06/04/2023 05:48 PM 3,052,094 2018YForm&lt;BR /&gt;06/05/2023 02:19 AM 41,695 TurboTaxReceipt86&lt;/P&gt;</description>
      <pubDate>Wed, 07 Jun 2023 20:35:16 GMT</pubDate>
      <guid>https://www.dropboxforum.com/t5/Security-and-Permissions/File-accessed-time-changed/m-p/690234#M9077</guid>
      <dc:creator>harryisthename</dc:creator>
      <dc:date>2023-06-07T20:35:16Z</dc:date>
    </item>
    <item>
      <title>Re: File accessed time changed</title>
      <link>https://www.dropboxforum.com/t5/Security-and-Permissions/File-accessed-time-changed/m-p/690323#M9088</link>
      <description>&lt;BLOCKQUOTE&gt;&lt;HR /&gt;&lt;a href="https://www.dropboxforum.com/t5/user/viewprofilepage/user-id/1712206"&gt;@harryisthename&lt;/a&gt;&amp;nbsp;wrote:&lt;BR /&gt;
&lt;P&gt;... or someone at Dropbox is accessing them through the Dropbox service&lt;/P&gt;
&lt;HR /&gt;&lt;/BLOCKQUOTE&gt;
&lt;P&gt;Dropbox doesn't access your files through the normal operation of the service, and they certainly can't access the files on your computer. They may be able to access the files in your account while providing support (i.e. you've submitted a help desk ticket that requires them to access your account, etc.), but they aren't accessing your files otherwise.&lt;/P&gt;</description>
      <pubDate>Thu, 08 Jun 2023 12:24:00 GMT</pubDate>
      <guid>https://www.dropboxforum.com/t5/Security-and-Permissions/File-accessed-time-changed/m-p/690323#M9088</guid>
      <dc:creator>Rich</dc:creator>
      <dc:date>2023-06-08T12:24:00Z</dc:date>
    </item>
    <item>
      <title>Re: File accessed time changed</title>
      <link>https://www.dropboxforum.com/t5/Security-and-Permissions/File-accessed-time-changed/m-p/690356#M9090</link>
      <description>&lt;P&gt;That's what I would like to think.&amp;nbsp; Unfortunately, I have to do the deep forensics to discover what is doing this.&amp;nbsp; I can monitor access on my end and see if Dropbox is doing it locally.&amp;nbsp; That is, I still believe Dropbox service is doing this because it is very challenging and time consuming to verify the integrity of uploads of changed files.&amp;nbsp; That's because the computer can crash, files can be modified offline (command prompt from a recovery flash drive), there can be an over-reliance on the Volume Shadow Subsystem which can be problematic in a less than healthy computer, hard disk drive issues can occur (soft NTFS and hard disk errors), anti-virus filters screwing up (my Ransomware protection is off), the Dropbox service itself being problematic, etc., etc.&amp;nbsp;&amp;nbsp; Note I have the Free Dropbox.&amp;nbsp; Thus integrity checking is paramount and the grand challenge is to do it without affecting local or Dropbox-server performance.&amp;nbsp; I have seen a few posts circa a few years ago about desiring file integrity checking with no clear answer.&amp;nbsp; Perhaps it finally got implemented.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;That is, it is not enough to verify file integrity by looking at which files I have in my 1M files at startup and comparing only the filenames (paths) and file sizes and dates/time modified to what Dropbox has in the cloud or relying entirely on VSS.&amp;nbsp; Even calculating MD5 hashes is time consuming on 1M files.&amp;nbsp; At some point it behooves the Dropbox servers to sample individual files and do a true file compare or at the very least do an MD5 compare.&amp;nbsp; And if my (Free) Dropbox has 1M files, it certainly cannot do a true file compare at Windows Startup - too time consuming. With my Free Dropbox, it might instead do a MD5 hash compare on portions of the 1M files and flag which ones it has done -- it would do more and more over time to spread the load of it's servers (and my local machine) not being overwhelmed doing all 1M files MD5 compares at a time.&amp;nbsp; Such an MD5 compare would open and close the file locally and cause the date accessed to be changed.&amp;nbsp; This might explain what I saw.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Unfortunately, Dropbox does not (as far as I know) disclose under what conditions it will access the file locally -- you believe it **does not** and I respectfully believe it might.&amp;nbsp; It's important for me to know so I can take steps accordingly to monitor rogue file accesses.&amp;nbsp; Unless you are a Dropbox engineer who definitely knows the answer, the answer remains a puzzle.&amp;nbsp; Only someone from Dropbox can authoritatively answer this question, IMHO.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Thu, 08 Jun 2023 15:16:39 GMT</pubDate>
      <guid>https://www.dropboxforum.com/t5/Security-and-Permissions/File-accessed-time-changed/m-p/690356#M9090</guid>
      <dc:creator>harryisthename</dc:creator>
      <dc:date>2023-06-08T15:16:39Z</dc:date>
    </item>
    <item>
      <title>Re: File accessed time changed</title>
      <link>https://www.dropboxforum.com/t5/Security-and-Permissions/File-accessed-time-changed/m-p/690647#M9109</link>
      <description>&lt;P&gt;Hi all,&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Thanks for your input on this. To explain a bit, there are two main components to how the Dropbox desktop application keeps your files in sync:&lt;/P&gt;
&lt;UL&gt;
&lt;LI&gt;During normal operation, it patiently waits for any file activity like a new file added/edited/deleted from your Dropbox folder. When that happens it syncs those changes to your account.&lt;/LI&gt;
&lt;LI&gt;During startup, the application indexes your Dropbox files to check for changes made locally while the application was off, or remotely from your other devices/accounts you share with.&amp;nbsp;&lt;/LI&gt;
&lt;/UL&gt;
&lt;P&gt;This is how Dropbox can keep your files in sync, even if your computer isn't online 24/7. So, even if you're not making changes to the files directly - this likely accounts for what you’re seeing as far access times.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P data-unlink="true"&gt;From our side, rest assured that your files are safe, and if you're curious about our internal security procedures, we have lots of information in our &lt;A href="https://www.dropbox.com/static/business/resources/Security_Whitepaper.pdf" target="_self"&gt;security whitepaper&lt;/A&gt;.&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Hope this helps!&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Fri, 09 Jun 2023 16:25:58 GMT</pubDate>
      <guid>https://www.dropboxforum.com/t5/Security-and-Permissions/File-accessed-time-changed/m-p/690647#M9109</guid>
      <dc:creator>Sam DBX</dc:creator>
      <dc:date>2023-06-09T16:25:58Z</dc:date>
    </item>
    <item>
      <title>Re: File accessed time changed</title>
      <link>https://www.dropboxforum.com/t5/Security-and-Permissions/File-accessed-time-changed/m-p/691320#M9153</link>
      <description>&lt;P&gt;Hi Samantha, thank you very much!&amp;nbsp; I need some time to investigate further.&amp;nbsp;&amp;nbsp; Thank you for the useful whitepaper.&amp;nbsp; Perhaps you can comment on this:&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Using SysInternals procmon, I am seeing that one or two times a day, Dropbox mysteriously chooses perhaps three or four files to do procmon operations of &lt;STRONG&gt;QueryEAFile&lt;/STRONG&gt; on the file (say &lt;STRONG&gt;&lt;FONT color="#FF0000"&gt;&lt;EM&gt;C:\Users\Admin\Dropbox\PITCH.51&lt;/EM&gt;&lt;/FONT&gt;&lt;/STRONG&gt;:&lt;STRONG&gt;COM.DROPBOX.ATTRS&lt;/STRONG&gt;) (which BTW returns an INVALID PARAMETER code) and causes Windows Defender &lt;STRONG&gt;(Msmpeng.exe) &lt;/STRONG&gt;to open and read the first 26 bytes of the original file (&lt;STRONG&gt;&lt;FONT color="#FF0000"&gt;&lt;EM&gt;C:\Users\Admin\Dropbox\&lt;/EM&gt;&lt;/FONT&gt;&lt;/STRONG&gt;&lt;STRONG&gt;&lt;FONT color="#FF0000"&gt;&lt;EM&gt;PITCH.51&lt;/EM&gt;&lt;/FONT&gt;&lt;/STRONG&gt;) and close the file.&amp;nbsp; This may be what causes the file access time to change.&amp;nbsp; I have no idea what provoked Dropbox todo the &lt;STRONG&gt;QueryEAFile&lt;/STRONG&gt; (see &lt;A href="https://learn.microsoft.com/en-us/windows-hardware/drivers/ddi/ntifs/nf-ntifs-ntqueryinformationfile" target="_blank"&gt;https://learn.microsoft.com/en-us/windows-hardware/drivers/ddi/ntifs/nf-ntifs-ntqueryinformationfile&lt;/A&gt; ) and I am aware many people have complained for years about such files being created and remaining around (not the case here - they do not remain around).&amp;nbsp; See &lt;A href="https://help.dropbox.com/sync/extended-attributes" target="_blank"&gt;https://help.dropbox.com/sync/extended-attributes&lt;/A&gt;&amp;nbsp; .&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Dropbox always states it's likely a shared folder or syncing to a device that is using a different file system and this is needed to propagate extended attributes from one file system to another.&amp;nbsp; Fair enough.&amp;nbsp; &lt;U&gt;&lt;STRONG&gt;But there are no other devices connected to the account&lt;/STRONG&gt;&lt;/U&gt; (a Free account), everything has been revoked, the password was changed, 2FA was set up, sfc /scannow, chkdsk C: were done, no other anti-virus is running, I went through autoruns with a fine tooth comb and the issue persists and apparently had been going on for months.&amp;nbsp;&amp;nbsp; I intend to study this, with hopefully your help -- otherwise I am overwhelmed trying to attempt this on another clean install of Windows 10.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Just a few files per day.&amp;nbsp; It gets more interesting: I will add that at one point I saw on the portal Security settings &lt;U&gt;an Android device which was connected to an ASN router belonging to my ISP and a few miles from my home&lt;/U&gt;.&amp;nbsp; That was strange and smacks of (SWAG) MITM.&amp;nbsp; It's very challenging to research this and get Spectrum or Dropbox to help.&amp;nbsp; The natural inclination is: we do a great job and it has to be something on your end.&amp;nbsp; Understood.&amp;nbsp; But your help is appreciated and it's in your best interest to take this seriously, which I believe you do.&amp;nbsp; I deleted that connection and the issue persists.&amp;nbsp; I have never installed Dropbox on my Android phone.&amp;nbsp; If I am contacted privately, I will be happy to provide screenshots and more procmon logs.&amp;nbsp; Either I am being spied on (I have nothing to hide), my Dropbox is compromised/rogue, or my Windows Defender is compromised/rogue.&amp;nbsp; I will be studying this further.&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I am including a snippet of a procmon log for a file &lt;STRONG&gt;&lt;FONT color="#FF0000"&gt;&lt;EM&gt;PITCH.51&lt;/EM&gt;&lt;/FONT&gt;&lt;/STRONG&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;This is important because Digital Forensics depends on the file access time for monitoring of file integrity and suspicious behaviors.&amp;nbsp; It is challenging enough to get that last access time correct and interpret it, Dropbox (or Windows defender) just confuse the matter if they are responsible for these (possibly) unnecessary file access updates.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I will continue to update as I learn more.&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Blessings!&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Harry&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Procmon for pitch.51" style="width: 800px;"&gt;&lt;img src="https://www.dropboxforum.com/t5/image/serverpage/image-id/38453i6EC4BB34C5064345/image-size/large?v=v2&amp;amp;px=999" role="button" title="Dropbox_image001.JPG" alt="Procmon for pitch.51" /&gt;&lt;span class="lia-inline-image-caption" onclick="event.preventDefault();"&gt;Procmon for pitch.51&lt;/span&gt;&lt;/span&gt;&lt;/P&gt;</description>
      <pubDate>Tue, 13 Jun 2023 05:30:23 GMT</pubDate>
      <guid>https://www.dropboxforum.com/t5/Security-and-Permissions/File-accessed-time-changed/m-p/691320#M9153</guid>
      <dc:creator>harryisthename</dc:creator>
      <dc:date>2023-06-13T05:30:23Z</dc:date>
    </item>
    <item>
      <title>Re: File accessed time changed</title>
      <link>https://www.dropboxforum.com/t5/Security-and-Permissions/File-accessed-time-changed/m-p/691607#M9158</link>
      <description>&lt;P&gt;Hi Harry,&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Thanks for the detailed information.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;We'll look into it and get back to you to share some insights if available.&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Thanks for your patience so far!&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Wed, 14 Jun 2023 08:28:35 GMT</pubDate>
      <guid>https://www.dropboxforum.com/t5/Security-and-Permissions/File-accessed-time-changed/m-p/691607#M9158</guid>
      <dc:creator>Sam DBX</dc:creator>
      <dc:date>2023-06-14T08:28:35Z</dc:date>
    </item>
    <item>
      <title>Re: File accessed time changed</title>
      <link>https://www.dropboxforum.com/t5/Security-and-Permissions/File-accessed-time-changed/m-p/691894#M9179</link>
      <description>&lt;DIV&gt;&lt;SPAN class=" author-d-1gg9uz65z1iz85zgdz68zmqkz84zo2qowz80ziz80zz84zz122zfz65zufqi6z68zyz68zz74zz65zz86zz84zz82zz70z3bpyz69zjz68zajp"&gt;Hey Harry,&lt;/SPAN&gt;&lt;/DIV&gt;
&lt;DIV&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;DIV&gt;&lt;SPAN class=" author-d-1gg9uz65z1iz85zgdz68zmqkz84zo2qowz80ziz80zz84zz122zfz65zufqi6z68zyz68zz74zz65zz86zz84zz82zz70z3bpyz69zjz68zajp"&gt;Thanks for holding on. Here are some points we can provide a bit more info:&lt;/SPAN&gt;&lt;/DIV&gt;
&lt;DIV&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;DIV&gt;&lt;SPAN class=" author-d-1gg9uz65z1iz85zgdz68zmqkz84zo2qowz80ziz80zz84zz122zfz65zufqi6z68zyz68zz74zz65zz86zz84zz82zz70z3bpyz69zjz68zajp"&gt;First one&lt;/SPAN&gt; &lt;SPAN class=" author-d-1gg9uz65z1iz85zgdz68zmqkz84zo2qowz80ziz80zz84zz122zfz65zufqi6z68zyz68zz74zz65zz86zz84zz82zz70z3bpyz69zjz68zajp h-lparen"&gt;(as&lt;/SPAN&gt;&lt;SPAN class=" author-d-1gg9uz65z1iz85zgdz68zmqkz84zo2qowz80ziz80zz84zz122zfz65zufqi6z68zyz68zz74zz65zz86zz84zz82zz70z3bpyz69zjz68zajp"&gt; you've mentioned) Dropbox does occasional sanity check true file comparisons and in between. Basically, we monitor the designated path of the syncing Dropbox folder and wait for filesystem events like add/edit/delete from the OS, which triggers a response from the Dropbox desktop application to then index/sync any changes that were made.&lt;/SPAN&gt;&lt;/DIV&gt;
&lt;DIV&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;DIV&gt;&lt;SPAN class=" author-d-1gg9uz65z1iz85zgdz68zmqkz84zo2qowz80ziz80zz84zz122zfz65zufqi6z68zyz68zz74zz65zz86zz84zz82zz70z3bpyz69zjz68zajp"&gt;Regarding other devices connected to your account, we are happy to look into this further for you, and get a better understanding of what you're seeing at your end.&amp;nbsp;&lt;/SPAN&gt;&lt;/DIV&gt;
&lt;DIV&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;DIV&gt;&lt;SPAN class=" author-d-1gg9uz65z1iz85zgdz68zmqkz84zo2qowz80ziz80zz84zz122zfz65zufqi6z68zyz68zz74zz65zz86zz84zz82zz70z3bpyz69zjz68zajp"&gt;I’m sure you’re aware of these steps, but not harm in reinstating - if you suspect that an Android device has accessed your account without your authorization:&lt;/SPAN&gt;&lt;/DIV&gt;
&lt;DIV&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;UL class="listtype-bullet listindent1 list-bullet1"&gt;
&lt;LI&gt;&lt;SPAN class=" author-d-1gg9uz65z1iz85zgdz68zmqkz84zo2qowz80ziz80zz84zz122zfz65zufqi6z68zyz68zz74zz65zz86zz84zz82zz70z3bpyz69zjz68zajp"&gt;Change your password&lt;/SPAN&gt;&lt;/LI&gt;
&lt;LI&gt;&lt;SPAN class=" author-d-1gg9uz65z1iz85zgdz68zmqkz84zo2qowz80ziz80zz84zz122zfz65zufqi6z68zyz68zz74zz65zz86zz84zz82zz70z3bpyz69zjz68zajp"&gt;Review your connected devices: &lt;/SPAN&gt;&lt;SPAN class="attrlink url author-d-1gg9uz65z1iz85zgdz68zmqkz84zo2qowz80ziz80zz84zz122zfz65zufqi6z68zyz68zz74zz65zz86zz84zz82zz70z3bpyz69zjz68zajp url"&gt;&lt;A class="attrlink" href="http://www.dropbox.com/account/security" target="_blank" rel="noreferrer nofollow noopener" data-target-href="http://www.dropbox.com/account/security"&gt;http://www.dropbox.com/account/security&lt;/A&gt;&lt;/SPAN&gt;&lt;/LI&gt;
&lt;LI&gt;&lt;SPAN class=" author-d-1gg9uz65z1iz85zgdz68zmqkz84zo2qowz80ziz80zz84zz122zfz65zufqi6z68zyz68zz74zz65zz86zz84zz82zz70z3bpyz69zjz68zajp"&gt;Disconnect any devices you don't recognise&lt;/SPAN&gt;&lt;/LI&gt;
&lt;/UL&gt;
&lt;DIV&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;DIV&gt;&lt;SPAN class=" author-d-1gg9uz65z1iz85zgdz68zmqkz84zo2qowz80ziz80zz84zz122zfz65zufqi6z68zyz68zz74zz65zz86zz84zz82zz70z3bpyz69zjz68zajp"&gt;Again, we can surely look into this further for you&lt;/SPAN&gt;&amp;nbsp;&lt;SPAN class=" author-d-1gg9uz65z1iz85zgdz68zmqkz84zo2qowz80ziz80zz84zz122zfz65zufqi6z68zyz68zz74zz65zz86zz84zz82zz70z3bpyz69zjz68zajp h-lparen"&gt;(via&lt;/SPAN&gt;&lt;SPAN class=" author-d-1gg9uz65z1iz85zgdz68zmqkz84zo2qowz80ziz80zz84zz122zfz65zufqi6z68zyz68zz74zz65zz86zz84zz82zz70z3bpyz69zjz68zajp"&gt; our support ticket).&lt;/SPAN&gt;&lt;/DIV&gt;
&lt;DIV&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;DIV&gt;&lt;SPAN class=" author-d-1gg9uz65z1iz85zgdz68zmqkz84zo2qowz80ziz80zz84zz122zfz65zufqi6z68zyz68zz74zz65zz86zz84zz82zz70z3bpyz69zjz68zajp"&gt;Best!&amp;nbsp;&lt;/SPAN&gt;&lt;/DIV&gt;</description>
      <pubDate>Thu, 15 Jun 2023 09:31:53 GMT</pubDate>
      <guid>https://www.dropboxforum.com/t5/Security-and-Permissions/File-accessed-time-changed/m-p/691894#M9179</guid>
      <dc:creator>Sam DBX</dc:creator>
      <dc:date>2023-06-15T09:31:53Z</dc:date>
    </item>
    <item>
      <title>Re: File accessed time changed</title>
      <link>https://www.dropboxforum.com/t5/Security-and-Permissions/File-accessed-time-changed/m-p/692437#M9194</link>
      <description>&lt;P&gt;Hi Samantha, thank you again for your thoughtful reply. &amp;nbsp;I believe you can see my email address from this message.&amp;nbsp; If so, can I trouble you to *PLEASE* privately email me as there are some rather very important things I would like to discuss with you privately.&amp;nbsp; I do intend, for transparency sake and as a professional courtesy to those who are following this post, to ask you at some point to summarize what we conclude privately, which may take a bit of time. Or perhaps I can summarize down the road.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;In the meantime, my only comment about the sanity check scan -- it's good to know you do that from time to time BUT it does not apply here as the procmon tool did not reveal any Readfiles for the file compares -- just the Create, close and read (by Windows Defender) of the 26-byte com.dropbox.atttrs file.&amp;nbsp; If this were a sanity check, the dropbox service would have to read and return the data to the cloud for cloud-compare (or the cloud would have to download the cloud version of the file to the local machine data for the local machine to compare to it's local copy).&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I look forward (hopefully) to your email.&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Blessings,&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Harry&lt;/P&gt;</description>
      <pubDate>Sat, 17 Jun 2023 07:24:05 GMT</pubDate>
      <guid>https://www.dropboxforum.com/t5/Security-and-Permissions/File-accessed-time-changed/m-p/692437#M9194</guid>
      <dc:creator>harryisthename</dc:creator>
      <dc:date>2023-06-17T07:24:05Z</dc:date>
    </item>
    <item>
      <title>Re: File accessed time changed</title>
      <link>https://www.dropboxforum.com/t5/Security-and-Permissions/File-accessed-time-changed/m-p/692818#M9214</link>
      <description>&lt;P&gt;Hi Harry,&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Not a problem, always happy to help.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Our team has been advised to contact you directly (via email).&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Ps: if you haven't done so, please verify your email address, so we can fully assist you there:&amp;nbsp;&lt;A href="https://help.dropbox.com/account-access/verify-email" target="_blank"&gt;https://help.dropbox.com/account-access/verify-email&lt;/A&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Thank you!&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Mon, 19 Jun 2023 14:35:31 GMT</pubDate>
      <guid>https://www.dropboxforum.com/t5/Security-and-Permissions/File-accessed-time-changed/m-p/692818#M9214</guid>
      <dc:creator>Sam DBX</dc:creator>
      <dc:date>2023-06-19T14:35:31Z</dc:date>
    </item>
    <item>
      <title>Re: File accessed time changed</title>
      <link>https://www.dropboxforum.com/t5/Security-and-Permissions/File-accessed-time-changed/m-p/692960#M9222</link>
      <description>&lt;P&gt;Hi Samantha.&amp;nbsp; Thank you!&amp;nbsp; Are you able to confirm I verified?&amp;nbsp; I logged off and logged in to my dropbox account on the portal but no verification email was sent nor did I expect one -- 2FA was in effect and I got a code on my cell.&amp;nbsp; I did not state the device was a trusted device.&amp;nbsp; I'll wait to hear from Dropbox privately.&amp;nbsp; It's possible you meant a verification email from the community blog which I believe is separate (I am using the same email however); not sure.&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Thank you so much!&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Harry&lt;/P&gt;</description>
      <pubDate>Mon, 19 Jun 2023 21:54:50 GMT</pubDate>
      <guid>https://www.dropboxforum.com/t5/Security-and-Permissions/File-accessed-time-changed/m-p/692960#M9222</guid>
      <dc:creator>harryisthename</dc:creator>
      <dc:date>2023-06-19T21:54:50Z</dc:date>
    </item>
    <item>
      <title>Re: File accessed time changed</title>
      <link>https://www.dropboxforum.com/t5/Security-and-Permissions/File-accessed-time-changed/m-p/693217#M9252</link>
      <description>&lt;P&gt;Hi Harry,&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;I've asked our team to resend the verification email, let me know if you got it.&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Thanks!&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Tue, 20 Jun 2023 17:52:02 GMT</pubDate>
      <guid>https://www.dropboxforum.com/t5/Security-and-Permissions/File-accessed-time-changed/m-p/693217#M9252</guid>
      <dc:creator>Sam DBX</dc:creator>
      <dc:date>2023-06-20T17:52:02Z</dc:date>
    </item>
    <item>
      <title>Re: File accessed time changed</title>
      <link>https://www.dropboxforum.com/t5/Security-and-Permissions/File-accessed-time-changed/m-p/693273#M9258</link>
      <description>&lt;P&gt;Hi Samantha,&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Thank you again!&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I've gone through a couple of rounds of verifying my email and account but the problem is that because I have a free account, I see no way of communicating to suppport my private findings.&amp;nbsp; I see a link to a chat bot, a link to community (such as here), and general answers to general questions.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Please let me know if I am confused and if it is possible to temporarily give me a paid account or for me to upgrade my account and later revoke it so I can engage in a normal email and support ticket assigned to a person who can address my security concerns.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Thank you again!&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Harry&lt;/P&gt;</description>
      <pubDate>Tue, 20 Jun 2023 21:47:30 GMT</pubDate>
      <guid>https://www.dropboxforum.com/t5/Security-and-Permissions/File-accessed-time-changed/m-p/693273#M9258</guid>
      <dc:creator>harryisthename</dc:creator>
      <dc:date>2023-06-20T21:47:30Z</dc:date>
    </item>
    <item>
      <title>Re: File accessed time changed</title>
      <link>https://www.dropboxforum.com/t5/Security-and-Permissions/File-accessed-time-changed/m-p/693455#M9271</link>
      <description>&lt;P&gt;Hey Harry,&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;We've engaged with our support team (and we have your info/email). That should be ok!&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;You should hear from us soon.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Thanks again.&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Wed, 21 Jun 2023 16:30:13 GMT</pubDate>
      <guid>https://www.dropboxforum.com/t5/Security-and-Permissions/File-accessed-time-changed/m-p/693455#M9271</guid>
      <dc:creator>Sam DBX</dc:creator>
      <dc:date>2023-06-21T16:30:13Z</dc:date>
    </item>
    <item>
      <title>Re: File accessed time changed</title>
      <link>https://www.dropboxforum.com/t5/Security-and-Permissions/File-accessed-time-changed/m-p/695157#M9422</link>
      <description>&lt;P&gt;Hi Samantha, can I trouble you to followup as I have not been contacted by anyone yet.&amp;nbsp; I think your last note to me was Wed 06/21/2023 one week ago saying they would reach out.&lt;/P&gt;&lt;P&gt;Blessings,&lt;/P&gt;&lt;P&gt;Harry&lt;/P&gt;</description>
      <pubDate>Wed, 28 Jun 2023 20:38:00 GMT</pubDate>
      <guid>https://www.dropboxforum.com/t5/Security-and-Permissions/File-accessed-time-changed/m-p/695157#M9422</guid>
      <dc:creator>harryisthename</dc:creator>
      <dc:date>2023-06-28T20:38:00Z</dc:date>
    </item>
    <item>
      <title>Re: File accessed time changed</title>
      <link>https://www.dropboxforum.com/t5/Security-and-Permissions/File-accessed-time-changed/m-p/697683#M9578</link>
      <description>&lt;P&gt;Hi Harry,&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Apologies for the late reply here. I can see that you're already in touch via email.&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Let me know if you need anything.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Thanks!&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Mon, 10 Jul 2023 13:11:22 GMT</pubDate>
      <guid>https://www.dropboxforum.com/t5/Security-and-Permissions/File-accessed-time-changed/m-p/697683#M9578</guid>
      <dc:creator>Sam DBX</dc:creator>
      <dc:date>2023-07-10T13:11:22Z</dc:date>
    </item>
    <item>
      <title>Re: File accessed time changed</title>
      <link>https://www.dropboxforum.com/t5/Security-and-Permissions/File-accessed-time-changed/m-p/697814#M9582</link>
      <description>&lt;P&gt;Yes, thanks.&amp;nbsp; I am in communication and submitted my report and thank you for connecting me to support!&amp;nbsp; I asked "D" to reply if he has been seeing my emails in support including the detailed Word attachment.&amp;nbsp; Hopefully he has.&amp;nbsp; Thanks, Harry&lt;/P&gt;</description>
      <pubDate>Mon, 10 Jul 2023 20:44:05 GMT</pubDate>
      <guid>https://www.dropboxforum.com/t5/Security-and-Permissions/File-accessed-time-changed/m-p/697814#M9582</guid>
      <dc:creator>harryisthename</dc:creator>
      <dc:date>2023-07-10T20:44:05Z</dc:date>
    </item>
    <item>
      <title>Re: File accessed time changed</title>
      <link>https://www.dropboxforum.com/t5/Security-and-Permissions/File-accessed-time-changed/m-p/697953#M9585</link>
      <description>&lt;P&gt;Hi Samantha,&lt;/P&gt;&lt;P&gt;Are you able to tell if "D" (name omitted to respect his privacy) received my Word attachment I emailed Thu July 6&amp;nbsp; 11:34 PM?&amp;nbsp; I asked for an acknowledgement it was received and have not heard back.&amp;nbsp; Thank you,&amp;nbsp; Harry&lt;/P&gt;</description>
      <pubDate>Tue, 11 Jul 2023 14:06:09 GMT</pubDate>
      <guid>https://www.dropboxforum.com/t5/Security-and-Permissions/File-accessed-time-changed/m-p/697953#M9585</guid>
      <dc:creator>harryisthename</dc:creator>
      <dc:date>2023-07-11T14:06:09Z</dc:date>
    </item>
    <item>
      <title>Re: File accessed time changed</title>
      <link>https://www.dropboxforum.com/t5/Security-and-Permissions/File-accessed-time-changed/m-p/698015#M9592</link>
      <description>&lt;P&gt;Hi Harry,&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;No problem, the communication is set as ''open'', but I will check if I can provide a timeline for you.&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Thank you!&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Tue, 11 Jul 2023 16:44:13 GMT</pubDate>
      <guid>https://www.dropboxforum.com/t5/Security-and-Permissions/File-accessed-time-changed/m-p/698015#M9592</guid>
      <dc:creator>Sam DBX</dc:creator>
      <dc:date>2023-07-11T16:44:13Z</dc:date>
    </item>
    <item>
      <title>Re: File accessed time changed</title>
      <link>https://www.dropboxforum.com/t5/Security-and-Permissions/File-accessed-time-changed/m-p/698993#M9682</link>
      <description>&lt;P&gt;Hi Samantha, take a look at "D"'s response and mine to his in the ticket.&amp;nbsp; I'm sure you will find it interesting.&amp;nbsp; In any case, I would appreciate keeping this blog open as unsolved.&amp;nbsp;&amp;nbsp;&amp;nbsp; Thanks,&amp;nbsp; Harry&lt;/P&gt;</description>
      <pubDate>Sat, 15 Jul 2023 00:53:06 GMT</pubDate>
      <guid>https://www.dropboxforum.com/t5/Security-and-Permissions/File-accessed-time-changed/m-p/698993#M9682</guid>
      <dc:creator>harryisthename</dc:creator>
      <dc:date>2023-07-15T00:53:06Z</dc:date>
    </item>
  </channel>
</rss>

