Security Changes in Google will Disrupt Old Links of Drive and YouTube.
Public links to an untold number of Google Drive items will soon cease to work. Google is changing the ways in which link sharing is handled on both services in the name of increased security, and even if active users are allowed to choose from the switch, abandoned files and videos on unused or inactive accounts can simply go unnoticed.
Security Changes in YouTube Links
Because shared links are now part of a newer system, Google says security is increased. The newer links on YouTube would appear to be harder to guess or access for anyone without explicit access. The newer links also have the effect of connecting more activity to specific accounts and requiring viewers to connect to a user profile that allows access to be tracked and included.
On YouTube, any publicly available videos, but labeled “Unlisted,” will have an effect. As described in a 5-minute video and blog post by YouTube, any unlisted videos uploaded before 2017 will be changed to a private one on July 23, 2017. The way private video works now, killing any old links or embedding, as well as limiting sharing to up to 50 people — all of whom require a Google account to view it. As a reminder, you and the people you choose can only view private videos. Once these videos are made privately on July 23rd, any previously used link will no longer function as Unlisted.
To retain your unlisted videos in their unlisted state, you should fill out this form by 23 July 2021 before 2017. YouTube recommends that you choose to avoid this amendment when you treat your unlisted videos such as public videos (for example, they are embedded or shared on third-party websites). If you opt-out, your current connections will continue to work as they currently do, but they will not benefit from the security update.
Using YouTube, you can make your Unlisted video uploaded before 2017 as “Public.” The older videos can be re-uploaded under the new system to take advantage of the security update. Data, like views or comments, related to the original upload, will not be transmitted. Each video that is embedded using the old link must also be updated to the new video URL.
As a reminder, the Unlisted feature will not be removed. It is still possible to upload new videos as Unlisted. Only videos uploaded prior to January 1, 2017, will be affected by this update. YouTube creators can go back through their older Unlisted videos and select the privacy setting that is best for them.
Security Changes in Google Drive Links
The same change is happening for Google Drive, as announced on the Workspace Updates blog earlier today. Now a link will contain a resource key that determines who accesses or does not receive access to cloud-stored files. You’ll continue to have access to the file if you’ve already accessed it (presumably when you log into your Google account) and have “direct access.”
It is a little more complicated if you use a workspace Google account managed by your employer, school, or other company. The IT/administrator department can decide either to opt-out completely, to update anyone without an opt-out, or to upgrade and enable individual users to remove the update.
Administrators can use the Alert Center to see how much your organization affects users, folders, shared drives, and files. Search a warning with the topic “Drive security update.” Admins should decide how their organization will be asked to update their security before 23 July 2021. Admins can choose how their organization uses the security update at Admin Console Apps > Google Workspace > Drive and Docs > Sharing settings > Security update for links.
If the administrator does not choose to update the security, end-users with impacted files, starting July 26, 2021, with their impacted files, will receive an e-mail notification. End-users have to decide how to update their files by September 13, if their administration permits it.
Users not included in Google Workspace receive a notification on their affected files from Google Drive from July 26, 2021, and are able to remove the security update. The new files are subject to the above-mentioned conditions. These users are expected to decide how to apply the update to their files until September 13, 2021.
Issues with type=domain or type=anyone Drive API permission that are affected by Link=true(v2) or allowFileDiscovery = false(v3) In addition to the item ID, a resource key for accessing these items is now required.
