Dropbox Reverse Engineered Link
This whole thing confuses me. I can not reconcile these two statements:
That being said, we wonder what Dropbox aims to gain by employing such anti-reversing measures. Most of Dropbox’s “secret sauce” is on the server side which is already well protected. We do not believe these anti-reverse engineering measures are beneficial for Dropbox users and for Dropbox.
Then later:
The paper goes to great lengths explaining how Dhiru and Przemyslaw successfully gained access to a victim’s Dropbox account and files. The two also mentioned in the paper with each new version of Dropbox, developers were able to harden the client’s security, which in turn eliminated one or more attack vectors.
Seems like the purpose is obfuscate how Dropbox works to avoid casual hacks. Either way, it is nice to know that Dropbox is constantly improving security.