UK Mobile Operator O2 Leaks MMS Photos
Anonymous Hero writes "UK Mobile Operator O2 allows its customers to send Multimedia Messaging Service (MMS) photos to email recipients by way of a web interface. The URLs published by the MMS-to-email application are not authenticated, so a simple Google search reveals hundreds, if not thousands of private photos."
Reader ttul points out similar coverage of this issue at InformationWeek.
Under pressure from the NY attorney general, major telecoms have agreed to permanently stop offering MMS service.
I blame web 2.0 and young people.
Back in the good old days you would have used safe ftp.
ftp never hurt anyone.
I do harbour dreams of being a Tor node operator.
Domestic spying is now "Benign Information Gathering"
Arr, not a looker in the bunch!
Spelling mistakes, grammatical errors, and stupid comments are intentional.
Google can dig up all kinds of wonderful information.
Heartfelt thanks to all the people of slashdot for mounting a DDOS attack on our servers.
The O2 team.
No sig today...
Try searching for each of those 16-character IDs, and you'll see that each has already been posted publically, and most seem to be from just the one user. Which makes sense, if Google managed to index them in the first place.
Sure, 02 should have taken steps to avoid being indexed, but they aren't responsible for leaking the photos.
And It would be quite easy to write a script to try various combinations of 16 hex digits to try and randomly view a photo but depending on how many photos are being hosted the hit rate could be quite low.? Yeah, seeing as there are about 10^19 combinations, the hit rate would be fairly low. Did the author seriously consider this to be flaw?
Worse still, the majority of the images taken on cameras turns out to be children. Ironically, O2 has a website dedicated to "Protect Our Children", well a good first step would be to avoid leaking customer photos.
What bullshit idea is it that pictures of children need to be removed from the world? If you look at the history of photography, pictures of children have always been an important part of street photography, portraits, and artistic photography. In the US and many other places, it's legal to take pictures of children, even without permission of their parents. There are many pictures of children on Flickr and elsewhere.
There is no evidence that pictures of children place them at risk. Can we please stop and reverse this meme that there is anything wrong with taking pictures of children?
I don't really give a damn about pictures of children per se, but demonizing legitimate and legal content is a serious threat to free speech and democracy.