2,739 karma · joined April 28, 2014
Since the beginning AMP team was clear that AMP is not very useful without cache.
I do agree with all of the concerns raised, but wanted to point this out as to not get sidestepped from the main discussion.
https://www.alexkras.com/i-had-lunch-with-google-amp-team/ https://www.ampproject.org/learn/overview/
Lol, as someone who criticized Google on multiple occasions, just wanted to point out that it’s OK to call them out when they (may be) wrong and still like their technology.
https://www.techtldr.com/posts/2018/summary-for-2018-01-03/
One sentence summary, keywords and statistics for best HN posts with score greater than 50, aggregated daily.
The theme does not look like HN, so thought you might like that.
I only wrote this because I was shocked too. I genuinely did not expect this behavior, and I've been using Google Photos a lot in the past year.
Re AMP, I was not just posting to gain up-votes, I believed in all the things I said. But I did underplayed the benefits that AMP provided, for which I apologized. You can read more about that here if you'd like: https://www.alexkras.com/google-amp-is-winning/
I don't have an agenda... I saw something the surprised me concerning my security, realized that other's might have overlooked it, and wrote a blog post about it...
Re continues re post, it is not against HN terms. I was doing it because I thought that there are people who can benefit from my writing, I take a lot of time to write my posts and it sucks when nobody gets to read it. I did however go overboard towards the end, I have been warned, and I am only submitting articles once now. Such as this post, as you can see in my history.
I still think it's OK to use Google Photos. People just should be very careful with what they chose to share.
Unfortunately for me, I was using the other flows to share my photos.
This can be seen by inspecting image link in Google Drive.
I was simply expecting to see the same behavior with Google Photos. As you said, at the very least it would be nice to see a warning, which turns out they provide in some, but not all flows.
Coinbase link, is my experiment of trying to monetize my blog. Like I said, 2 kids...
Sort of like Google Drive does it. Make it easy, sure, but let me know the trade offs.
Please let me know if I got something wrong.
------------------------------------------
This appears to be true and another key distinction between Google Drive and Google Photos.
Google Photos uses direct link to image in their Web UI. This means that if I right click on a Google Photo image, select “Copy Link Location”, and share this link on the Internet, anyone with the link will be able to see the photo.
Google Drive adds an extra level of protection. The URL exposed in Google Drive Web UI is actually a redirect to the real image location. That redirect makes sure that the user is authenticated and has permissions to access the image. After the check is complete, however, Google Drive will redirect to the physical location of the image. Copying and pasting that URL will have similar security implications.
Given that those URLs are extremely hard to guess, I am not as concern with this finding. My biggest complain with Google Photos is that it offers me a UI to email private links to other people, without alerting me that user authentication will not be performed to view this content.