3 ms·
> and Google deployed defenses to limit the scanning of the existing URLs I find it amazing that they didn't do this in advance and needed to have this happen
by gist 11y ago
> and Google deployed defenses to limit the scanning of the existing URLs
I find it amazing that they didn't do this in advance and needed to have this happen to know to fix it.
I remember way back in 1996 or 1997 being able to do URL scans of UPS shipping tracking numbers. It was trivial to bring up the ship to address for any given shipper (for all of there customers) as long as you had at least one of a shippers tracking numbers (then just alter to suit). [1]
[1] So in other words if I received a UPS package with a tracking number for ABC company I could easily see every else that they were shipping to including names, addresses.
- tedmiston 11y agoThere was a similar vulnerability with Delta boarding passes... in 2014. http://gizmodo.com/hacker-says-url-trick-grants-access-other-peoples-delta-1671747336 http://gizmodo.com/hacker-says-url-trick-grants-access-other...