Earlier quoted context omitted.
If you launch something like QuipTxt, make it obvious to people that their images are public Google Picasa stores images as public URLs without any such warning. Because with random URL's, you effectively have passworded each image. Even more secure than if they were all locked into a nice MySQL database, because then they would all be behind only a single password. I think you don't have to freak out users with too…
Yes, but passwords are typically used as a form of authentication (i.e. something you know) - to prove the identity of the user. Once a user has authenticated themselves then it is a separate problem to decide what they are authorized to see. Even really complex keys in links are still a big problem as they are far too easy to pass around - I've seen multiple problems on commercial systems and products where document…
Thousands of private fotos leaked, privacy disaster for Quiptxt.com users
21–30 of 60 posts
Re: Thousands of private fotos leaked, privacy disaster for Quiptxt.com users
#22The founder of the company responded on the Reddit thread: http://www.reddit.com/r/pics/comments/bjezp/massive_privacy_... The application is described in the iTunes store: http://itunes.apple.com/app/quip-free-photo-texting/id291358...
Interestingly this flaw was reported in 2009 on Digg. http://digg.com/security/Quip_TXT_for_iPhone_FAIL_WIN_NSFW I am not sure if QuitTxt tried fixing it that time.
http://www.reddit.com/r/pics/comments/bjezp/massive_privacy_...
Re: Thousands of private fotos leaked, privacy disaster for Quiptxt.com users
#23Earlier quoted context omitted.
if you only need to guess something address to see it, it is public
I disagree. A password is not a magic spell. It's a set of letters and numbers that, if guessed correctly, will give me access to something you wanted kept private. An obfuscated URL is a set of letters and numbers that, if guessed correctly, will give me access to something you wanted kept private. Because one uses a MySQL database, and the other uses a file system, is irrelevant. They are functionally identical whe…
Re: Thousands of private fotos leaked, privacy disaster for Quiptxt.com users
#24Two things in this story that are not new, but still amazing to me. 1) A significant portion of people love taking pictures of themselves naked. This portion seems to be growing. 2) Another significant potion of people love publishing and making fun of people for whatever reason they can find. These people will dig through your trash, hack your servers, socially-engineer your passwords, etc. The more they can publicl…
People don't change. Everybody is a pervert or a sadist or something. Everybody does something weird when they think nobody is looking. The population is growing, and so there is certainly more going on at any one time, but I doubt the portion is really growing.
Re: Thousands of private fotos leaked, privacy disaster for Quiptxt.com users
#25Seems they had no security at all (just a random 5 character hash).. Reddit users are seemingly busy sharing nsfw pictures and linking them to facebook accounts, will probably result in a couple of suicides when all is said and done :(
Re: Thousands of private fotos leaked, privacy disaster for Quiptxt.com users
#26Re: Thousands of private fotos leaked, privacy disaster for Quiptxt.com users
#27Earlier quoted context omitted.
People don't change. Everybody is a pervert or a sadist or something. Everybody does something weird when they think nobody is looking. The population is growing, and so there is certainly more going on at any one time, but I doubt the portion is really growing.
The issue isn't that people enjoy weird things, it's that people do things that hurt others, and don't feel guilty about it.
Re: Thousands of private fotos leaked, privacy disaster for Quiptxt.com users
#28Earlier quoted context omitted.
People don't change. Everybody is a pervert or a sadist or something. Everybody does something weird when they think nobody is looking. The population is growing, and so there is certainly more going on at any one time, but I doubt the portion is really growing.
The issue isn't that people enjoy weird things, it's that people do things that hurt others, and don't feel guilty about it.
Re: Thousands of private fotos leaked, privacy disaster for Quiptxt.com users
#29Seems they had no security at all (just a random 5 character hash).. Reddit users are seemingly busy sharing nsfw pictures and linking them to facebook accounts, will probably result in a couple of suicides when all is said and done :(
Do not confuse Reddit and 4chan.