because last night i was on  
this forum and this guy exposed all my private photobucket  
pictures straight from my album it had my url and  
everything and my album is set to PRIVATE wtf ??

Post edited at 10:40 am on Aug. 20, 2008 by hawtshawty

-------
MAKE MONEY YAY!  =}}

---

There's a way. =/ But It's like with a program and all. Are you sure it's private?

---

---

There's a way. =/ But It's like with a program and all. Are you sure it's private?

---

A program you say... sounds technical. You sound like you know all about it. I think you are a smart girl because you know about, like, programs and stuff. Maybe could you hack my ex-girlfriends email? I tried but the password is really tough. I'm sure that with, like, a program, it would be really easy for a computer genius such as yourself to figure out.

-------
The moon's phase on the day you were
born was waxing crescent.

---

Quote: from iJeannie at 10:41 am on Aug. 20, 2008

---

There's a way. =/ But It's like with a program and all. Are you sure it's private?

---

A program you say... sounds technical. You sound like you know all about it. I think you are a smart girl because you know about, like, programs and stuff. Maybe could you hack my ex-girlfriends email? I tried but the password is really tough. I'm sure that with, like, a program, it would be really easy for a computer genius such as yourself to figure out.

---

Hey. Your so nice.  

Srsly they had a video of how to do it but It was removed from youtube. I can't remember now. I asked about this a while ago, there's was a topic.. But It got fucked with the bug.

You sound like an awesome exboyfriend btw.

---

Quote: from iJeannie at 10:41 am on Aug. 20, 2008

---

There's a way. =/ But It's like with a program and all. Are you sure it's private?

---

 
yeah its private i double checked and everything this sux

---

UH nuh. Did you had bad pictures? =/  

Better start deleting.

btw, maybe you had a easy guest password and that's how he logged in. Check it out in your account options!

Post edited at 11:00 am on Aug. 20, 2008 by Stand Up

I got an email from Ryan N today describing a huge privacy leak in Photobucket - allowing anyone to look at anyone else's private photos. Photobucket protects photos normally by password protecting them. However, as Ryan found, a username/password is not the only way to access the photos:

   Here's a random livejournal user's "bucket"
   http://img.photobucket.com/albums/v462/glass0rthodoxy/
   as you can see it requires a login.
   replace the subdomain with 'pb5′ voila, you're in:
   http://pb5.photobucket.com/albums/v462/glass0rthodoxy/

As you can see, simply by looking at the exact same directory on another hostname allows you complete access to the user's private photos. Allowing indexing is not always a bad thing - sometimes it's a huge convenience. Other times it's a huge privacy leak that can cause people a lot of trouble and pain. Who knows what private photos people store there? This is a great example of why you can't think about applications the same way browsers do (same domain policy). Other servers can provide equal or better opportunity for exploitation and data leakage if they are somehow tied together. It's best to explore all options when doing penetration testing. Nice find, Ryan!
source:http://ha.ckers.org/blog/20070713/photobucket-allows-public-access-to-private-photos/

-------
www.S0litude.com FREE HARDCORE PORN

---

Photobucket Allows Public Access To Private Photos

I got an email from Ryan N today describing a huge privacy leak in Photobucket - allowing anyone to look at anyone else's private photos. Photobucket protects photos normally by password protecting them. However, as Ryan found, a username/password is not the only way to access the photos:

    Here's a random livejournal user's "bucket"
    http://img.photobucket.com/albums/v462/glass0rthodoxy/
    as you can see it requires a login.
    replace the subdomain with 'pb5′ voila, you're in:
    http://pb5.photobucket.com/albums/v462/glass0rthodoxy/  

As you can see, simply by looking at the exact same directory on another hostname allows you complete access to the user's private photos. Allowing indexing is not always a bad thing - sometimes it's a huge convenience. Other times it's a huge privacy leak that can cause people a lot of trouble and pain. Who knows what private photos people store there? This is a great example of why you can't think about applications the same way browsers do (same domain policy). Other servers can provide equal or better opportunity for exploitation and data leakage if they are somehow tied together. It's best to explore all options when doing penetration testing. Nice find, Ryan!
source:http://ha.ckers.org/blog/20070713/photobucket-allows-public-access-to-private-photos/

---

That was patched ages ago.

-------
YOU MUST
NARFLE THE GARTHOK!

Robdude is my LW Wife.

helpfulanon@gmail.com for more info.