Attachments available to any user with link

Contribute Feature
9

I think that the file URLs are the SHA1 hash of the content, but there’s also a sequential upload ID. Not sure where that is used in a url?