[tptacek]

What kills me is that this seems like such an unforced error. Just make 256-bit random tokens. They're private URLs. Who cares how ugly they are?

[qyv]

Not to mention making public file sharing explicit instead of implicit, or at least giving the option to exclude specific files from a public URL.