Gone in Six Characters: Short URLs Considered Harmful for Cloud Services
Also notice the different attitudes of affected services:<p>- OneDrive "[...] reiterated that the issues we discovered do not qualify as a security vulnerability"<p>- Google Maps "[...] responded immediately.  All newly generated goo.gl/maps URLs have 11- or 12-character tokens, and Google deployed defenses to limit the scanning of the existing URLs."<p>Well done, Microsoft!