Dropbox shared links are routinely exposed by referrer header

Posted on by

Link. Same thing with Google public shares,SmugMug, etc. Secret URLs are just minor security.