793693 - thunderbird and ubuntuone filelink safety hole

Status: RESOLVED INVALID

(Thunderbird :: FileLink, defect)

Description

[Stéphane ANCELOT]

User Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:13.0) Gecko/20100101 Firefox/13.0.1
Build ID: 20120615040358

Steps to reproduce:

I sent some files through filelink using ubuntuone, BUT I made a mistake typing the recipient name, there was two recipients beginning with same name and I choose the wrong one.

Email has been sent, too late ! 



Actual results:

Ok, so I decided to remove the shared folder from the web ubuntu one interface, in order to disallow access to these files.

Unfortunately, if you remove the shared folder, you will not have anymore access, but files are always shared !!!!!!




Expected results:

The shared folder's file shoud not be available from ubuntu one anymore since the shared folder has been removed.

Using ubuntu one, is a safety hole .

Comment 1

[Stéphane ANCELOT]

I contacted ubuntuone support in order to remove the files, I had to send them all the files uri that were .

The ubuntuone customer support answer is :

Hi,

I'm very sorry, that file had been cached by our website so that's why it was still serving it up. 
I've requested for it to be removed from the cache, so it should be removed soon.

Thanks,