TECH Signal 414
ClarityCheck exposed 9 million face images in unsecured S3 bucket, researcher finds
↗
ClarityCheck exposed over 9 million face images and personal data in an unsecured S3 bucket, according to security researcher Jeremiah Fowler.
Exposed face images are unchangeable biometric data, and the misconfigured APIs also revealed contact details. The risk is high because the data was left open for months, and the company only secured it after being contacted by Wired. This highlights the risk of misconfigurations in people-search services.
Written by elseif from the cluster below · every claim links back to a sourceThe three things worth knowing
ClarityCheck stored over 9 million image files in an unsecured Amazon S3 bucket.
The bucket contained folders named 'faces' and 'profiles' with photos of adults, teenagers, and children.
Misconfigured APIs allowed anyone to enter a name and retrieve email addresses, physical addresses, and phone numbers.
THE CLUSTER