When password capabilities meet URL shorteners

[Scott Moore]

I came across this post and thought that this list would find it interesting. Vitaly’s group spent some time brute forcing the short URLs produced by URL-shortening services and discovered that users often used them to reduce the hassle of sharing long URLs that are effectively capabilities for accessing cloud services.

Blog post here: https://freedom-to-tinker.com/blog/vitaly/gone-in-six-characters-short-urls-considered-harmful-for-cloud-services/