According to duplicate bug 177113, it is still quite easy to guess the URL to the changes file on the librarian even though we don't link to it.
Since all the files from the upload are stored in the librarian sequentially, they are likely to get consecutive IDs. As the filename is known, it doesn't take many guesses to find what the LibraryFileAlias ID is.
According to duplicate bug 177113, it is still quite easy to guess the URL to the changes file on the librarian even though we don't link to it.
Since all the files from the upload are stored in the librarian sequentially, they are likely to get consecutive IDs. As the filename is known, it doesn't take many guesses to find what the LibraryFileAlias ID is.