How I Access the Deleted Files of Someone in Google Drive | Bug Bounty

How I Access the Deleted Files of Someone in Google Drive | Bug Bounty

This article explores an intriguing aspect of Google Drive’s trash feature, revealing that files moved to trash may still be accessible through direct download links. Despite appearing deleted, such files can pose a risk for accidental data leaks. Users are advised on best practices for ensuring file safety.

Keypoints :

  • Moving a file to Google Drive’s trash does not revoke access immediately.
  • Files can still be downloaded through direct links even after being trashed.
  • This behavior is intentional according to Google; it is not a bug.
  • Users may assume files are deleted when in fact they remain accessible.
  • Google Drive’s UI misleads users by removing preview and download options.
  • Potential for accidental data leaks exists, especially for sensitive files.
  • To ensure true file deletion, users should manually revoke sharing before trashing and permanently delete the file.
  • Understanding the distinction between UI experience and backend processes is crucial for data security.

Full Story: https://infosecwriteups.com/how-i-access-the-deleted-files-of-someone-in-google-drive-bug-bounty-eac134df1de4?source=rss—-7b722bfd1b8d—4