search

photo / frontend

The official @github repository of the Trovebox frontend software. A photo sharing and photo management web interface for data stored "in the cloud" (i.e. Amazon S3, Rackspace CloudFiles, Google Storage).
https://trovebox.com
Apache License 2.0
1.37k stars 244 forks source link

is trovebox really private if use S3 storage? #1573

Closed mingqi closed 9 years ago

mingqi commented 9 years ago

I found trovebox will change the s3 bucket policy to open read access for anyone. and the link of photo in page is also s3 page. do it means other people can download my photo if he know the link, is right?

jmathai commented 9 years ago

We add random characters to the file name. It's not private if people can guess the file path and those characters.

The alternate is to do signed URLs which is possible but then you can't link to an image file indefinitely.