aiqbench takeAI Safety

A security researcher exposed over 985,000 unprotected photo IDs and passports hosted on public URLs, revealing a critical gap in access controls for cloud-based verification systems used by cannabis clubs and other entities. This incident underscores the immediate risk of identity theft and data resale, as sensitive personal information—including addresses and phone numbers—is accessible without authentication. The vulnerability stems from the software provider's configuration rather than the clubs themselves, highlighting the necessity for stricter default security settings in identity management platforms.

Source coveringThe Verge

What this isA model's reading of the article and related coverage, written for aiqbench. Not the publisher's words.

Nearly a million passports and photo IDs were left unprotected on the public internet

The VergeJune 10, 20267 min read

Typing a few letters and numbers into my web browser, I find myself gaping at the identity documents of complete strangers. The passport of a young woman from Germany. The passport of a man from Spain with glasses resting on his head. The front and back of another man's driver's license, a stereotypically goofy expression on his face. They were all sitting unprotected at public URLs, with no password or access control of any sort. If I sent you a link, you could have looked at someone's passport. "We have to do something about it as fast as possible, because people will find this and resell it. It will do damage," Sammy Azdoufal told me i … Read the full story at The Verge.

Typing a few letters and numbers into my web browser, I find myself gaping at the identity documents of complete strangers. The passport of a young woman from Germany. The passport of a man from Spain with glasses resting on his head. The front and back of another man’s driver’s license, a stereotypically goofy expression on his face. They were all sitting unprotected at public URLs, with no password or access control of any sort. If I sent you a link, you could have looked at someone’s passport. “We have to do something about it as fast as possible, because people will find this and resell it. It will do damage,” Sammy Azdoufal told me in May. Azdoufal is the…

Excerpt shown under the publisher's RSS terms · 120 words · full text and figures are on the publisher's site

Read at The Verge ↗Ask about this article