[madahab]

There have been news stories of a certain SMS app exposing private photos. When communicating between a user of the app and other users, the app was - and still is, apparently - sending SMS media as a link to the media. It turns out the links are sequential and require no authentication, meaning you can easily "fusker" through the private attachments of anyone using the app.


Not totally trivial to do this although it's far from "hacking", the biggest obstacle is that a) its not super simple to automate and b) lots of failures apparently due to platform overload.



Needless to say, there is some sexting etc in there. So, here are some finds.


Anyone else who finds good stuff on this site should feel free to add them to this thread, but as long as the gateway is open, there's no reason to name the platform any more than I did in the title.