5 ms·

I have a house in the woods and never lock the door because nobody knows where it is anyway! What's the problem? This is definitely not an ideal setup, but it'

I have a house in the woods and never lock the door because nobody knows where it is anyway! What's the problem? This is definitely not an ideal setup, but it's hard to improve. The only solution I can think of is having an application server serve the pictures after authenticating the request. The picture servers would need to be connected to some sort of database to do that. Serving a single image would incur multiple times the current cost.

bbatsell 16y ago
> The only solution I can think of is having an application server serve the pictures after authenticating the request. Or, make the URL fbcdn.com/p/timestamp/hash of internal salt + timestamp/unique ID.jpg. If the timestamp isn't from within the past 2 minutes, don't serve the image. Almost every static server offers this as a plugin, and it doesn't need to touch a database. AWS offers something similar as a time-limited "access key".
- chopsueyar 16y ago
  Nice idea.
  - parfe 16y ago
    Right Click, Save Image As... Post to imgur. How would this change be any different? And a better question is, why bother?
    - chopsueyar 16y ago
      Not sure why you are hating on ideas to mitigate this from occuring.
kree10 16y ago
But people can see your house in the woods. I think it's more like: see that forest out there? In one of those trees, I drilled a hole in the trunk and stuck a rolled-up $100 bill in it. Even though I told you it's out there, good luck finding it, unless I tell you which tree.
- joezydeco 16y ago
  Unless I rent a bloodhound for an afternoon for $50...
  - kree10 16y ago
    All right, I'll give you that. But what if your "reward" was not $100 but a photo of an unknown subject. There's a small chance that photo is something you find valuable (newsworthy, embarrassing to the subject, etc.), but there's a far better chance it's a scene from a toddler's birthday party taken on a bad cell phone camera. That's closer to what Facebook is doing. I wouldn't rent a bloodhound for that.

bbatsell 16y ago

> The only solution I can think of is having an application server serve the pictures after authenticating the request. Or, make the URL fbcdn.com/p/timestamp/hash of internal salt + timestamp/unique ID.jpg. If the timestamp isn't from within the past 2 minutes, don't serve the image. Almost every static server offers this as a plugin, and it doesn't need to touch a database. AWS offers something similar as a time-limited "access key".

chopsueyar 16y ago
Nice idea.
- parfe 16y ago
  Right Click, Save Image As... Post to imgur. How would this change be any different? And a better question is, why bother?
  - chopsueyar 16y ago
    Not sure why you are hating on ideas to mitigate this from occuring.

kree10 16y ago

But people can see your house in the woods. I think it's more like: see that forest out there? In one of those trees, I drilled a hole in the trunk and stuck a rolled-up $100 bill in it. Even though I told you it's out there, good luck finding it, unless I tell you which tree.

joezydeco 16y ago
Unless I rent a bloodhound for an afternoon for $50...
- kree10 16y ago
  All right, I'll give you that. But what if your "reward" was not $100 but a photo of an unknown subject. There's a small chance that photo is something you find valuable (newsworthy, embarrassing to the subject, etc.), but there's a far better chance it's a scene from a toddler's birthday party taken on a bad cell phone camera. That's closer to what Facebook is doing. I wouldn't rent a bloodhound for that.