[Brute force] Prevent brute force query on sprunge

[trinhnx]

[Given] Sprunge is simple, get content then push, an URL is returned and that's it. It's quick. But now there is no way to control the content which is already pushed.

[Problem] The returned URL is simple and short enough for an attacker to write a simple create to crawl it all. I do not see any threshold limit or any mechanism related to prevent such dangerous action.

[zzo38]

An advantage of a short URL is that you can easily write it down quickly. A disadvantage is what you describe. Using a cryptographic hash (e.g. SHA-3) instead would make it longer (and would lose the advantage of writing it down quickly), but avoids that problem as well as allowing to check for duplicates easily and you can verify the data easily enough (that it has not been tampered with) once you have the URL.