3 ms·
I've been wanting something like this for semi-private image shares as Imgur's URLs aren't very random; but Transfer has a similar security problem; it looks li
by mmahemoff 12y ago
I've been wanting something like this for semi-private image shares as Imgur's URLs aren't very random; but Transfer has a similar security problem; it looks like the URLs need to be longer as a prerequisite to being un-crawlable. I hope you'll consider it.
- rtpg 12y agowell there is the filename in there, so you could give your files really long names
- aw3c2 12y agoNever expect things you upload to the internet to be private. There are so many vectors where this can go wrong. The host might list directory indexes, s3 buckets can be open, sites can be hacked, etc etc.
- mmahemoff 12y agoYou did see the part where I said "semi-" private? I'm just suggesting OP might want to harden the URLs, otherwise the URLs might as well be /1 /2 /3.
- nl5874 12y agoOp here. The urls are randomly generated combined with the chosen filename, I assume this should be safe enough. Links will expire in 2 weeks. Working on functionality where you can configure the lifetime. Eg, just 1 download or 2 days.
- mmahemoff 12y agoOP, I'm not an expert but I think you need to introduce more entropy to prevent opportunistic crawling of every possible URL.