Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
tptacek
on Nov 6, 2015
|
parent
|
context
|
favorite
| on:
Hidden in plain sight: Brute-forcing Slack private...
What kills me is that this seems like such an unforced error. Just make 256-bit random tokens. They're private URLs. Who cares how ugly they are?
qyv
on Nov 6, 2015
[–]
Not to mention making public file sharing explicit instead of implicit, or at least giving the option to exclude specific files from a public URL.
Consider applying for YC's Summer 2026 batch! Applications are open till May 4
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
