News for hackers. Stuff that matters.

A comment on More Security Loopholes Found In Google Docs. Parent comment

Re:More Security Loopholes Found In Google Docs by jongraehl on Thursday March 26, 2009 @01:36PM (#533799)
Nitpick: a nonce is supposed to be used only once (safe against replay). I think you both mean the URL is supposed to be secret. I agree that there are many ways (e.g. web proxies) for a URL to become not-secret.
[ Parent | on HN ]
Re:More Security Loopholes Found In Google Docs by tptacek on Thursday March 26, 2009 @02:53PM (#533928)
I'm corrupting the term "nonce" regularly, but OK, I'll stick with "token". I think "URL" leaves the mistaken impression that there is some way to pull a Google doc out of thin air; something else has to have gone wrong for these problems to impact you.
[ Parent | on HN ]