Flaw in photo booth maker’s website exposes customers’ pictures

A security researcher discovered that Hama Film's photo booth system publicly exposed customers' photos and videos because files uploaded to the company's servers were accessible without sufficient protections (such as rate-limiting). The researcher reported the issue but the company did not respond; while retention was reduced to 24 hours, the flaw can still be exploited daily to download all stored media, posing privacy risks — including images of young people.