[Fiware-iot] private documents visible

[Haller, Stephan]

Who is taking care of this? If this cannot be resolved, we need to switch to another tool.

Regards,
-Stephan

From: fiware-iot-bounces at lists.fi-ware.eu [mailto:fiware-iot-bounces at lists.fi-ware.eu] On Behalf Of Farkas, Lorant (NSN - HU/Budapest)
Sent: Freitag, 23. September 2011 15:08
To: fiware-iot at lists.fi-ware.eu
Subject: [Fiware-iot] FW: private documents visible


FYI, careful with the uploads... Setting private does not help.

Br,

Lorant

______________________________________________
From:   Bisztray, Denes (NSN - HU/Budapest)
Sent:   Friday, September 23, 2011 3:07 PM
To:     fiware-support at lists.fi-ware.eu
Cc:     Farkas, Lorant (NSN - HU/Budapest)
Subject:        private documents visible

Hi,

   The supposedly private documents are still reachable from outside. If you search google for keywords from the docs, it finds them and gives you the link. I believe this is a SERIOUS security problem, please resolve it ASAP.

Evidence:

    *   Search for Cumulocity NSN:

http://www.google.fi/#sclient=psy-ab&hl=hu&source=hp&q=Cumulocity+NSN&pbx=1&oq=Cumulocity+NSN&aq=f&aqi=&aql=1&gs_sm=e&gs_upl=4279l4899l2l5159l4l3l0l0l0l0l224l428l2-2l3l0&bav=on.2,or.r_gc.r_pw.&fp=9a24604d477dfd8&biw=1373&bih=728<http://www.google.fi/>

The third from the bottom is the PRIVATE supposedly not visible Architecture document.

2.      Trying it with IDAS Telefónica its even worse:

http://www.google.fi/#sclient=psy-ab&hl=hu&source=hp&q=IDAS+Telef%C3%B3nica&pbx=1&oq=IDAS+Telef%C3%B3nica&aq=f&aqi=&aql=1&gs_sm=e&gs_upl=49626l52101l0l52294l15l12l0l0l0l0l303l2660l0.1.9.1l11l0&bav=on.2,or.r_gc.r_pw.&fp=9a24604d477dfd8&biw=1373&bih=728<http://www.google.fi/>

  It's the third from the top.

Best,
Dénes Bisztray
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fiware.org/private/old-fiware-iot/attachments/20110923/21c8622a/attachment.html>