3 ms·
I just tested this with the image link for a non-shared photo in a private window. It loaded without incident. Not okay, Google. Getting hold of one of those
by mathw 9y ago
I just tested this with the image link for a non-shared photo in a private window. It loaded without incident.
Not okay, Google.
Getting hold of one of those URLs is not going to be easy, but still this is not at all what I would expect.
- mathw 9y agoOkay I've thought about it some more. The size of the URL for the image resource is utterly huge. If that is truly random in its generation, there's no way anybody's ever going to guess it or enumerate it. It's all SSL, so you'd need a serious network breach for anybody to sniff it, and then you have bigger problems. So yeah. Not that bothered upon further thought.
- akras14 9y agoAgreed, I am mostly bothered by UI that allows me to share these sacred private URL without alerting me that there is no additional security in place to insure that only user's I've shared the link with will be able to access my data. I still think it's OK to use Google Photos. People just should be very careful with what they chose to share.