You are not correct. Only you can delete your uploaded file. That reminds me of ...

toppy · on Nov 21, 2013

By "only you can delete" you mean "only user with your IP can delete"?

1. Open FF / upload some file, get https://mediacru.sh/<someid>

2. Open Chrome in private mode

3. Go https://mediacru.sh/api/<someid>/delete

4. File is gone!

ddevault · on Nov 21, 2013

You == your IP, in this case. We check the deleter's IP against the bcrypted one we store with the file before allowing them to delete it. There's an open GitHub issue discussing alternative methods [1] if you'd like to read some more about it.

[1] https://github.com/MediaCrush/MediaCrush/issues/311

toppy · on Nov 21, 2013

It's clear now. Nice job!