4 ms·
As far as I can tell, private folders are also subject to this URL leaking problem, but in a somewhat limited way. If someone can grab the URL to your "recent
by chaosmachine 17y ago
As far as I can tell, private folders are also subject to this URL leaking problem, but in a somewhat limited way.
If someone can grab the URL to your "recent changes" RSS feed (events.xml), they can watch every file change you make, and view any image you upload, without being logged in to your account.
If anyone from Dropbox wants to correct me on this, or wants more details, my contact info is in my profile.
- Groxx 17y agoThumbnails, but yes. Just tested it. Wasn't aware of that, but doesn't matter too much for me. I don't use it for images, am not ashamed of my images, and you only see what file was changed, not the changes made. An unlikely security problem, but probably a bad idea anyway. With a little complaining, I'd bet they'd put up an opt-out option, take out image thumbnails, and hopefully a layer of security over the feed.
- chaosmachine 17y agoYou can get full sized images if you play with the URL (change /i/s/ to /i/o/).