Gone in Six Characters: Short URLs Considered Harmful for Cloud Services · HackerPapers discussions

Gone in Six Characters: Short URLs Considered Harmful for Cloud Services — mentioned by flakiness

Fri, 11 Jun 2021 03:12:33 GMT

For these who prefer non-PDF arxiv link: https://arxiv.org/abs/1604.02734

Paper and discussion history. A mention is not an endorsement.

Gone in Six Characters: Short URLs Considered Harmful for Cloud Services — HN submission

Thu, 10 Jun 2021 22:26:20 GMT

Gone in Six Characters: Short URLs Considered Harmful for Cloud Services

1 point; 0 discussion replies on HN. Paper and source history. A submission is not an endorsement.

Gone in Six Characters: Short URLs Considered Harmful for Cloud Services — mentioned by fizwhiz

Thu, 10 Jun 2021 17:48:49 GMT

Turns out having your short URLs too short can also be problematic: https://arxiv.org/pdf/1604.02734v1.pdf An example in this paper cites the shortener used by Google Maps. The researchers were able to enumerate all the short links by brute force and join destinations from specific residential addresses. This is scary because now you've essentially created all points of interest that 1 person visits (originating from their home address). Google's response was to expand their URL tokens from 5 characters to 12. The sparseness makes it uneconomical for someone to brute-force their way through.…

Paper and discussion history. A mention is not an endorsement.

Gone in Six Characters: Short URLs Considered Harmful for Cloud Services — mentioned by sangnoir

Mon, 08 Aug 2016 09:31:56 GMT

> Upon launch, gping.io will show you your distinctly private-but-shareable monitoring URL. This is bad for privacy if you will be using short URLs similar to TinyURL/bit.ly since short URLs can be bruteforced[1]. Additional authentication is probably a good idea. 1. http://arxiv.org/pdf/1604.02734v1.pdf

Paper and discussion history. A mention is not an endorsement.

Gone in Six Characters: Short URLs Considered Harmful for Cloud Services — mentioned by based2

Tue, 19 Apr 2016 20:38:38 GMT

http://arxiv.org/pdf/1604.02734v1.pdf http://www.icir.org/vern/papers/monarch-oak11.pdf

Paper and discussion history. A mention is not an endorsement.

Gone in Six Characters: Short URLs Considered Harmful for Cloud Services — HN submission

Thu, 14 Apr 2016 00:22:06 GMT

Short URLs Considered Harmful for Cloud Services

21 points; 5 discussion replies on HN. Paper and source history. A submission is not an endorsement.