English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Plus monthly

Global: Zendy Tools annual

Global: Zendy Tools monthly

Global: Zendy Free Plan

Modern cloud services are designed to encourage and support collaboration. Tohelp users share links to online documents, maps, etc., several services,including cloud storage providers such as Microsoft OneDrive and mappingservices such as Google Maps, directly integrate URL shorteners that convertlong, unwieldy URLs into short URLs, consisting of a domain such as 1drv.ms orgoo.gl and a short token.  In this paper, we demonstrate that the space of 5- and 6-character tokensincluded in short URLs is so small that it can be scanned using brute-forcesearch. Therefore, all online resources that were intended to be shared with afew trusted friends or collaborators are effectively public and can be accessedby anyone. This leads to serious security and privacy vulnerabilities.  In the case of cloud storage, we focus on Microsoft OneDrive. We show how touse short-URL enumeration to discover and read shared content stored in theOneDrive cloud, including even files for which the user did not generate ashort URL. 7% of the OneDrive accounts exposed in this fashion allow anyone towrite into them. Since cloud-stored files are automatically copied into users'personal computers and devices, this is a vector for large-scale, automatedmalware injection.  In the case of online maps, we show how short-URL enumeration reveals thedirections that users shared with each other. For many individual users, thisenables inference of their residential addresses, true identities, andextremely sensitive locations they visited that, if publicly revealed, wouldviolate medical and financial privacy.

Gone in Six Characters: Short URLs Considered Harmful for Cloud Services