News
[PDAs/Phones]| Monday 21st July 2008 |
Recipients of MMS photos who don't own a compatible phone - such as the new iPhone 3G - would instead be sent a URL from which they could view the O2 customer's image.
However, it was discovered late last week that the library of photos could be accessed using a simple InURL search on Google.
"As these web pages were wide open to the internet, not requiring any authentication
ADVERTISEMENT |
|
"I was able to craft a Google search that results in some matches to show an example of how this is an insecure method of hosting."
The Google search allowed anyone to view customers' photos, with the sender's phone number published at the top of each photo.
The problem was highlighted on dozens of blogs, news websites and even O2 messageboards over the weekend.
O2 eventually decided to take the nuclear option and take down the website viewing service. Now anyone attempting to view the leaked images is met with an Apache server error message.
The picture leak - many of which contained images of children - is particularly embarrassing for O2, as it also runs a Protect Our Children website.
Submit to: Digg | Slashdot | Del.icio.us | Technorati
Looking for O2? Click here to shop and compare online.
Apple iPhone 3G 8GB (O2)
O2, MP3, 300h standby, WAP, GPRS, 133h gram, Camera: Yes, Integrated







