Kudos to Dropbox for publishing this – making these things public is the best way to increase security (because of the feedback they'll get)