If you spent time on social media during the holidays, you probably met Popsugar's Twinning app, a tool that analyzes a confidence to find out which celebrity you are most similar. The results were, as is often the case with such tools, either comically generous or shockingly cruel, but they still set a curiosity that served to override the shaking voice in your brain and remind you that uploading personal stuff is actually poor.
TechCrunch reports that the Popsugar tool, surprisingly, doesn't care much about what happened to your self-help after you uploaded them, meaning they could be downloaded by just about everyone. Apparently, the images are stored in a "storage pad" hosted on Amazon web services, the URL of which was right there in the code of the tool's website.
"We confirmed the findings by uploading a dummy image of a particular file size at a particular time," wrote TechCrunch . "Then we scraped a list of file names that were uploaded during that period from the bucket's URL, downloaded them and found our uploaded image by searching for that image of a particular file size."
In response to ] TechCrunch 's piece, Popsugar locked himself in the bucket and confirmed that "the bend permits were not set up properly." The way to go, boys.
This is not a big deal, what about most users who put their results to the public to watch anyway. Of course, of course, not as much of a security risk as one's password or account numbers. Still, it serves as a reminder that it's not just Facebook, Uber and Trump dating sites that ooze your data, but also the most harmless quizzes and tools.
Next time, just trust Grandma when she says you look just like Brad Pitt.