Photo Booth Pics Exposed Online by Simple Flaw

A significant security vulnerability has been discovered in the systems of Hama Film, a photo booth company with operations in Australia, the UAE, and the United States. A security researcher known as Zeacer reported that a flaw in the company's website allowed for the public exposure of customer photos and videos stored on their servers. Zeacer first alerted Hama Film and its parent company, Vibecast, in late November, but initial responses were not forthcoming.

The vulnerability allowed for potentially wide-scale access to intimate customer moments captured within the photo booths. While the company has since implemented measures that reduce the exposure window for new photos to approximately 24 hours, the researcher noted that a persistent daily exploitation of the flaw could still lead to the download of all current server contents. Previously, over a thousand images from booths in Melbourne alone were found to be accessible online.