The Danger of the Dormant Link: Why Your Cloud Storage Needs an Audit

Convenience in cloud storage often creates a lingering security debt. While sharing files via links from services such as Google Drive, Microsoft OneDrive, and iCloud is a standard practice, Wired reports that these links can remain active long after their intended purpose, increasing the risk of exposure.

According to Wired, the danger grows the longer a link remains live. Files can be accessed by unintended recipients if a link is mistakenly forwarded or if a contact's email account is compromised. Depending on the permissions set by the user, unauthorized parties could view, modify, or delete files.

To mitigate these risks, Wired suggests performing regular audits of active sharing links. The process varies by provider:

* **Microsoft OneDrive:** Users can view shared items via the "Shared" link in the web portal and use the "Manage access" option to remove people or delete links. OneDrive also allows users to set expiration dates for sharing via the share panel's cog icon. * **Apple iCloud:** Users can access shared files through the "Shared" navigation pane on the web. While users can block specific contacts or stop sharing entirely, Wired notes that iCloud lacks an expiration period feature for links. * **Dropbox:** This service provides reminders to review shared content. Users can manage access via the "Shared" pane on the web or use built-in link expiry features. * **Google Drive:** Wired reports that Google Drive is less intuitive for auditing, requiring users to use the "People" filter to find files shared with specific contacts or "Anyone with the link." Like iCloud, Google Drive does not offer a link expiry feature, requiring manual removal of access.