It's not that much different than what happened to weev 10 years ago--a leaky url which was secured in the sense that it was unlinked and 'secret' (one had to g

It's not that much different than what happened to weev 10 years ago--a leaky url which was secured in the sense that it was unlinked and 'secret' (one had to guess the user's id). The legal conclusion was simple: weev did not have authorization to access those URLs. The implication being that you are not free to type whatever you want into the URL bar. If I make something accessible by URL accidentally, I haven't given you permission to access that URL.