Archive — US — techcrunch
Flaw in photo booth maker’s website exposes customers’ pictures
A flaw in Hama Film's website has exposed customers' photos and videos online. Security researcher Zeacer reported the vulnerability without a response from the company. The issue continues, allowing hackers to download content, despite pictures being deleted every 24 hours. This incident highlights poor security practices, similar to a recent issue with Tyler Technologies.
Key points
- A security researcher named Zeacer discovered the flaw in October but did not get a response from Hama Film.
- Photos and videos from customers are stored online and exposed due to a website flaw.
- Hama Film's servers were previously deleting photos every 2-3 weeks but now do so after 24 hours.
- Zeacer noted that despite the deletion, a hacker could still exploit the vulnerability daily.
- The incident reflects poor security practices similar to those reported with Tyler Technologies last month.
Why it matters
- This incident is aligned with growing concerns on data privacy and protection in the tech industry.
- The trend of companies facing data breaches and not implementing basic security measures has increased in recent years.
- By 2025, IT trends emphasize the significance of cybersecurity, including best practices like rate-limiting, data encryption, and timely responses to vulnerabilities.
The exposure of customer data on Hama Film's servers underscores the critical need for stringent cybersecurity measures, as companies continue to face vulnerabilities that can jeopardize user privacy.