Host webpages on Google Drive

Re:Host webpages on Google Drive by adhipg on Tuesday February 05, 2013 @02:15PM (#5172579)

Dropbox also does that. You can potentially host your website within your 'Public' Dropbox folder.

I'm sure Google is not using http://googledrive.com/ for anything that's user-identifiable.

The only harm that I think can happen with JS is you being able to access/set any cookies/storage that are set by another 'public' site hosted on Google Drive that you've accessed earlier.

[ Parent | on HN ]

Re:Host webpages on Google Drive by eli on Tuesday February 05, 2013 @02:34PM (#5172709)

Note that Dropbox discourages the use of Public folders. New accounts don't get one unless you know to request it.

[ Parent | on HN ]

Re:Host webpages on Google Drive by mchanson on Tuesday February 05, 2013 @02:24PM (#5172655)

Dropbox shuts links down if you get any significant traffic.

[ Parent | on HN ]

Re:Host webpages on Google Drive by ollieglass on Tuesday February 05, 2013 @02:33PM (#5172702)

Really? Could you give more detail - at what level of traffic do they shut down links?

[ Parent | on HN ]

Re:Host webpages on Google Drive by mchanson on Tuesday February 05, 2013 @02:39PM (#5172737)

https://www.dropbox.com/help/45/en

Looks like 20GB (free) or 200GB (paid) per day.

[ Parent | on HN ]

Re:Host webpages on Google Drive by qued on Tuesday February 05, 2013 @06:12PM (#5173935)

Seems like more than enough for simple sites shared with a bunch of people you know. That is about 600 GBs of bandwidth a month, for free.

If you need more bandwidth, you would probably be looking at any of the other innumerable hosting solutions available on the web.

[ Parent | on HN ]

Re:Host webpages on Google Drive by jjsz on Tuesday February 05, 2013 @05:18PM (#5173670)

That's PER link, so you can drop it in another folder, change the link, and maybe it refreshes since it's a different link? Can someone from Dropbox confirm this?

[ Parent | on HN ]

Re:Host webpages on Google Drive by businessleads on Tuesday February 05, 2013 @02:31PM (#5172690)

That doesn't sound very fun...

[ Parent | on HN ]

Re:Host webpages on Google Drive by FooBarWidget on Tuesday February 05, 2013 @05:09PM (#5173607)

> I'm sure Google is not using http://googledrive.com/ for anything that's user-identifiable.

Look at the screenshot in the article. It is in fact using https://googledrive.com/

[ Parent | on HN ]

Re:Host webpages on Google Drive by IWentToTheWoods on Tuesday February 05, 2013 @05:27PM (#5173716)

Yes, it uses googledrive.com, but not for anything user-identifiable.

The threat is that a user logs in to googledrive.com and receives an authentication cookie tied to their Google account. Later, they view a malicious user page at googledrive.com/host/someevilpage, and a script on that page reads the authentication cookie and sends it to the attacker, who can now log in to googledrive.com as the victim.

That doesn't happen here because you don't actually log in to googledrive.com. The worst a malicious script could do is harvest data set by other scripts, and that's a drastically smaller (although still present) threat.

[ Parent | on HN ]

Re:Host webpages on Google Drive by rukshn on Tuesday February 05, 2013 @11:23PM (#5174859)

you don't need to login in to have session cookeis isn't it? The google session cookies work in all google services a like isn't it?

[ Parent | on HN ]

Re:Host webpages on Google Drive by rgbrenner on Tuesday February 05, 2013 @02:13PM (#5172566)

What security issue are you thinking of? JavaScript doesn't run anything server-side...

[ Parent | on HN ]

Re:Host webpages on Google Drive by lmkg on Tuesday February 05, 2013 @02:29PM (#5172682)

Being able to serve JavaScript from Google's own servers makes it easier to do a cross-site scripting attack against someone else's Google Drive site. Since the malicious JS would be from the same origin, it's no longer cross-site, and gets a free pass around some of the browser's anti-XSS features.

[ Parent | on HN ]

Re:Host webpages on Google Drive by rgbrenner on Tuesday February 05, 2013 @03:09PM (#5172935)

thanks... good info.. I knew I was forgetting something..

[ Parent | on HN ]

Re:Host webpages on Google Drive by mixedbit on Tuesday February 05, 2013 @02:31PM (#5172693)

JavaScript can access any page and cookie from the same domain. So if I visited your googledrive.com hosted site, JavaScript from your site could potentially retrieve and send to you any other content on googledrive.com to which I have access.

[ Parent | on HN ]

Re:Host webpages on Google Drive by rgbrenner on Tuesday February 05, 2013 @02:59PM (#5172885)

thanks.. I was sure I was forgetting something...

[ Parent | on HN ]

Re:Host webpages on Google Drive by yanw on Tuesday February 05, 2013 @03:36PM (#5173071)

Google Online Security Blog - Content hosting for the modern web: http://googleonlinesecurity.blogspot.com/2012/08/content-hos...

[ Parent | on HN ]