News for hackers. Stuff that matters.

A comment on You can not simply publicly access private secure links, can you?. Parent comment

Re:You can not simply publicly access private secure links, ... by internetter on Thursday March 07, 2024 @12:36PM (#39631867)
This is actually fairly common for apps using CDNs – not just airtable. I agree it's potentially problematic
[ Parent | on HN ]
Re:You can not simply publicly access private secure links, ... by blue_green_maps on Thursday March 07, 2024 @01:33PM (#39632783)
Yes, this is the case for images uploaded through GitHub comments, I think.
[ Parent | on HN ]
Re:You can not simply publicly access private secure links, ... by eddythompson80 on Thursday March 07, 2024 @06:35PM (#39635959)
That's not true. There is a JWT token in the url with about 5 minute expiration window.
[ Parent | on HN ]