Jacob Kaplan-Moss

3 items tagged “sharing”

📌 [1604.02734] Gone in Six Characters: Short URLs Considered Harmful for Cloud Services

“In this paper, we demonstrate that the space of 5- and 6-character tokens included in short URLs is so small that it can be scanned using brute-force search. Therefore, all online resources that were intended to be shared with a few trusted friends or collaborators are effectively public and can be accessed by anyone. This leads to serious security and privacy vulnerabilities. In the case of cloud storage, we focus on Microsoft OneDrive. We show how to use short-URL enumeration to discover and read shared content stored in the OneDrive cloud, including even files for which the user did not generate a short URL. 7% of the OneDrive accounts exposed in this fashion allow anyone to write into them. Since cloud-stored files are automatically copied into users’ personal computers and devices, this is a vector for large-scale, automated malware injection. ” #

📌 Getaround - Peer-to-peer car sharing and car rental

Airbnb for cars. Awesome. But: “A Facebook account is required to use Airbnb.” FFFFUUUUU. #

📌 Dropbox - Home - Secure backup, sync and sharing made easy.

This looks fantastic. Can’t wait to get in on the beta. #