Showing results for 
Search instead for 
Do you mean 

Announcements
0 Kudos
P_T

Tagged Member Photos on Private Profiles are Visible - Privacy Violation!!!

Status: Investigating
by P_T on ‎12-27-2012 12:12 AM

The design of the tagged photo system is flawed. Photos are assigned predictable urls. If the tagged member has a profile photo, the url of that photo can be used to derive the urls of all photos of that member. The photos are visible to anyone on the Internet. A tagged account is NOT required. This applies to the photos uploaded by both adults and MINOR CHILDREN and is a violation of law in almost every jurisdiction on the planet.

 

This design flaw also applies to photos uploaded by hi5 members after the acquisition of hi5 by tagged. (The revelation of such photos requires a post-acquisition photo as the profile photo in order to see/use an example url.)

Comments
by abraham on ‎01-30-2013 05:23 PM

Hi P_T.  Please send me an example of these predictable URLs.  For privacy's sake you should probably send it to our open email, ticket # 16083-632348.

by P_T on ‎01-30-2013 07:22 PM

Ticket updated with complete and hopefully sufficient details. The information provided should have been in your software documentation already.

by abraham on ‎01-31-2013 05:55 PM

Looking into this now and am hoping to get an update tomorrow.

by KenR on ‎02-01-2013 03:18 PM

You noted this as resolved in another thread.  Are you still seeing this ir is it fixed?

by P_T on ‎02-01-2013 03:57 PM

Ken:

 

This issue is NOT fixed. The coding error allowing viewing the contents of Private albums on Public hi5 profiles has been fixed. This is separate. It relates to the DESIGN of the photo urls that results in being able find all  photos with Tagged style urls. I have seen 2 attempts to fix this on the Tagged side of the aisle using what I would call the "/pp/" url format. I have not seen the equivalent fix on the hi5 side, probably because the Tagged side fix will not work for hi5 and the engineers are still busy addressing hi5 photos with Tagged style urls.

by KenR on ‎02-04-2013 04:38 PM

Hope to have better information soon.  

by kyag on ‎03-07-2013 03:52 AM

Are fiends with private profile cannot be seen/accessed on the Search and Browse or anywhere ? How do i find him?