4 ms·
I have only given this a moment's thought, but why not just publish the URL map as a text file or SQLLite DB? So at least we know where they went? I don't thi
by jedberg 1y ago
I have only given this a moment's thought, but why not just publish the URL map as a text file or SQLLite DB? So at least we know where they went? I don't think it would be a privacy issue since the links are all public?
- devrandoom 1y agoAre they all public? Where can I see them?
- jedberg 1y agoYou can brute force them. They don't have passwords. The point is the only "security" is knowing the short URL.
- Alifatisk 1y agoI don't think so, but you can find the indexed urls here https://www.google.com/search?q=site%3A"goo.gl" https://www.google.com/search?q=site%3A"goo.gl" it's about 9,6 million links. And those are what got indexed, it should be way more out there
- sltkr 1y agoI'm surprised Google indexes these short links. I expected them to resolve them to their canonical URL and index that instead, which is what they usually do when multiple URLs point to the same resource.
- chneu 1y agoarchiveteam has the list at over 2billion urls with over a billion left to archive.
- DominikPeters 1y agoIt will include many URLs that are semi-private, like Google Docs that are shared via link.
- high_na_euv 1y agoSo exclude them
- ceejayoz 1y agoHow? How will they know a short link to a random PDF on S3 is potentially sensitive info?
- high_na_euv 1y agoI meant Google docs of which they know share settings
- ryandrake 1y agoIf some URL is accessible via the open web, without authentication, then it is not really private.
- bo1024 1y agoWhat do you mean by accessible without authentication? My server will serve example.com/64-byte-random-code if you request it, but if you don’t know the code, I won’t serve it.
- deleted 1y ago[deleted]
- prophesi 1y agoObfuscation may hint that it's intended to be private, but it's certainly not authentication. And the keyspace for these goog.le short URL's are much smaller than a 64byte alphanumeric code.
- hombre_fatal 1y agoSure, but you have to make executive decisions on the behalf of people who aren't experts. Making bad actors brute force the key space to find unlisted URLs could be a better scenario for most people. People also upload unlisted Youtube videos and cloud docs so that they can easily share them with family. It doesn't mean you might as well share content that they thought was private.
- Nifty3929 1y agoI'd rather see it as a searchable database, which I would think is super cheap and no maintenance for Google, and avoids these privacy issues. You can input a known goo.gl and get it's real URL, but can't just list everything out.
- growt 1y agoAnd then output the search results as a 302 redirect and it would just be continuing the service.
- deleted 1y ago[deleted]