Gone in Six Characters: Short URLs Considered Harmful for Cloud Services
Also notice the different attitudes of affected services:- OneDrive "[...] reiterated that the issues we discovered do not qualify as a security vulnerability"- Google Maps "[...] responded immediately.  All newly generated goo.gl/maps URLs have 11- or 12-character tokens, and Google deployed defenses to limit the scanning of the existing URLs."Well done, Microsoft!