极客观点
项目管理
HarmonyOS
Dropbox disabled access to previously created shared links of certain documents after finding that some users' sensitive files were exposed through Google AdWords campaigns.
- The flaw also affects Box and impacts shared files with hyperlinks.
- Shared links are only accessible to those with the link, but can be inadvertently disclosed in specific scenarios like when a user shares a document with a hyperlink and someone clicks on it, disclosing the original shared link.
- File-sharing company IntraLinks discovered the flaw while purchasing ads. It gained access to confidential files including tax returns, bank records, etc.
- Box will issue a statement on the weakness soon.
- Documents can be scooped up by advertising servers when users paste shared links into a search engine box. Security expert Graham Cluley recommended Box users change shared link security settings.
- This isn't the first time shared links came under security scrutiny. In 2011, researchers could access shared files by guessing URLs.
- Update: Box provided a statement saying secure content sharing is core to them and they provide various options for sharing. A Box spokesperson added that they haven't noticed abuse but are exploring ways to limit exposure and recommend using permission settings.
- Dropbox disabled access to previously shared links and patched the vulnerability for all future shared links. Dropbox for Business customers can restrict shared link access to team members.
Dropbox 在纳税申报表出现在 Google 之后会禁用旧的共享链接。
阅读 3
**粗体** _斜体_ [链接](http://example.com) `代码` - 列表 > 引用。你还可以使用@来通知其他用户。