# Attachments available to any user with link

**URL:** <https://meta.discourse.org/t/attachments-available-to-any-user-with-link/18868>\
**Category:** Feature\
**Created:** [14.Август.2014 21:52:14 UTC](https://meta.discourse.org/t/attachments-available-to-any-user-with-link/18868 "2014-08-14T21:52:14Z")\
**Posts on this page:** 1\
**Showing post:** 8

<div class="post-metadata">

**Author:** ![clay](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/clay/32/102156_2.png) [@clay](https://meta.discourse.org/u/clay)\
**Post date:** [06.Ноябрь.2015 16:15:23 UTC](https://meta.discourse.org/t/attachments-available-to-any-user-with-link/18868/8 "2015-11-06T16:15:23Z")

</div>

There’s an article about this problem in the context of Slack that is relevant to this conversation:

> **[Hidden in plain sight: Brute Forcing Slack private files - Ibuildings](https://ibuildings.nl/blog/2015/11/hidden-plain-sight-brute-forcing-slack-private-files/)**
>
> Everything you share on Slack automatically becomes available on a public url.

---

_[View the full topic](https://meta.discourse.org/t/attachments-available-to-any-user-with-link/18868)._
