Short URLs Considered Harmful for Cloud Services

Vitaly Shmatikov (via Bruce Schneier): Short URLs produced by bit.ly, goo.gl, and similar services are so short that they can be scanned by brute force.  Our scan discovered a large number of Microsoft OneDrive accounts with private documents.  Many of these accounts are unlocked and allow anyone to inject malware that will be automatically downloaded to users’ devices. … Continue reading Short URLs Considered Harmful for Cloud Services