Photo booth flaw exposes people’s private pictures online

The article describes a privacy-impacting security flaw in a photo booth provider (Hama Film) whose website stored customer photos and videos at easily guessable, unprotected URLs. A researcher discovered that anyone could download these files without authentication; the vendor reduced retention from weeks to ~24 hours but did not appear to fully address access controls, leaving potential for scraping and unauthorized exposure of event attendees' images.