Photobucket plugs hole that revealed private photos

Photobucket is latest site to fix holes that allowed strangers to view members' private photos.

Photobucket on Monday fixed a security hole that allowed people to view private photos of strangers.

All that was needed was the user ID of someone with a private album on Photobucket and the file name of one photo in their album, said Byron Ng, a Vancouver, B.C.-based computer technician who exposes security flaws in social networks and other sites.

Many MySpace users use Photobucket to post material on their MySpace pages, he said in an e-mail, adding, "This is a way to find 'some' private Photobucket albums."

MySpace and Photobucket are both owned by News Corp.

Photobucket fixed the hole Monday afternoon after being contacted by CNET News in the morning.

"Photobucket is aware of the issue and it has been resolved. A fix was rolled out this afternoon, less than 24 hours after the site was made aware of the issue," a Photobucket representative said in an e-mail.

About the author

Elinor Mills covers Internet security and privacy. She joined CNET News in 2005 after working as a foreign correspondent for Reuters in Portugal and writing for The Industry Standard, the IDG News Service, and the Associated Press. E-mail Elinor.

 

Discuss Photobucket plugs hole that revealed private photos

Conversation powered by Livefyre

Show Comments Hide Comments
Latest Galleries from CNET
Yezz's modular Project Ara pops up at MWC (pictures)
Up close with the metal curves of HTC's new flagship One M9 (pictures)
Some tight shots of the HTC Grip (pictures)
Piece by piece: A look at Yezz's take on Google's Project Ara (pictures)
QindredCam captures the moment so you don't have to (pictures)
Huawei MediaPad X2