it's a bit of that you have to know the sha, and that's quite unique. it's appar... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

Already__Taken 53 days ago | parent | context | favorite | on: Anyone can access deleted and private repository d...

it's a bit of that you have to know the sha, and that's quite unique. it's apparently unique enough for Google photos to "private" share without logins

Shocka1 52 days ago [–]

You only need the short SHA, which is 4 characters. Brute force ends up becoming very easy with 65k possibilities.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact