Researchers with Cybernews reported this Data filtration This affects users Portable Printer LifePrint. This brand produces instant printers associated with the iPhone and Android, with which users print images and GIFs directly from their smartphones.
The company is part of the C+Global Organization based in New Jersey, and was founded in 2003.
The filtration is related to Mobile app used by all users of these printers To materialize your paper photos either share pictures or videos with another person’s printer. The application in question exceeds 100,000 boot in Google Play.
And The bucket is poorly configured and without authentication That would be the origin of the shoots. Any Internet user where I knew where to look I could access more than 8 million unique photosExported users ‘data in JSON and CSV formats, as well as the username list, more than 100,000 users’ e -mail addresses.
Researchers also noticed that a public cloud deposit contained several versions of the firmware. The files had a private encryption key in a flat text that seemed to be used to sign firmware.
“This is a classic example of what you can’t do with IoT infrastructure,” ” confirmed the researcher Cybernews.
“This filtration shows several deviations from advanced practice, for example, not adequately segregation of users’ data, publication of cryptographic keys along with firmware and not using proper access control to ensure that only planned users can access their files and data,” – ” added.
On the other hand, the affected users are at the theoretical risk that malicious software captures their devices.
The shoots were discovered at the end of July, and the corresponding certificate was linked in early August.
Currently LifePrint users face multiple risksFor example, exposure to identity through personal information filtering. Photos leaks are usually intimate, exposing the user’s privacy to anyone on the Internet. In addition, the filtered personal information can be used for theft, persecution and attacks, Cybernews reports.
