3 ms·
The problem is that the random number is static. As Aegan says, anyone allowed to see a photo can leak its URL. It would be better if the URL would depend on th
by thomas11 16y ago
The problem is that the random number is static. As Aegan says, anyone allowed to see a photo can leak its URL. It would be better if the URL would depend on the user to whom the picture is served. But that'd be expensive.
- tptacek 16y agoAnyone allowed to see a photo can leak the photo. Why waste time protecting the ID?
- thomas11 16y agoSure, in practice there's not much of a difference, I'm nitpicking, but it's not exactly the same thing. People might leak the URL unintentionally, for instance by sending the link to others, not knowing that the photo owner doesn't want them to see the photo. One can also use URLs in places where images are not allowed, for example when submitting them to community websites, without first uploading the photo somewhere and leaving a trail.