[jedberg]

You can brute force them. They don't have passwords. The point is the only "security" is knowing the short URL.