Kodak Wireless Picture Frames Open To Public

Jaxoreth writes "The Kodak Easyshare Wireless Digital Picture Frame displays images via a per-frame RSS feed hosted by FrameChannel. Each frame's URL is identical except for a parameter matching its particular MAC address, enabling public browsing of users' feeds. And worse, if you reach the feed of a not-yet-activated frame, it gives you the code to activate it, allowing you to preload it with whatever content you choose."

Re:zero day vulnerability?

[fuzzyfuzzyfungus]

It bloody well would, unless the gaping black hole of goatse man in a million homes across the country qualifies as "defense in depth"...

so now we know the main plot point

[circletimessquare]

for "the ring ii"

Re:Mac address anatomy

[dunezone]

If you see anything good, or even just really strange, be sure and post it here!

Nice try TMZ.

Actually this illustrates the problem well

[Chrisq]

This innocent person has posted pictures of children and some recognisable locations. All it takes is for some pedo pervert to fantasise over the pictures and track them down.

Pictures of dicks

[bluefoxlucid]

And of course, we live in a world where every 13 year old is going to look at this and go, "Sweet! When the next guy buys one of these things, he's going to see pictures of dicks!"

Let's get it on...

[Dri]

http://rss.framechannel.com//productId=KD9371/frameId=00:23:4D:B8:07:8a [framechannel.com]

Switch activation codes, get someone elses pics?

[Anonymous Coward]

Could be funny to swap the default activation pics (with the activation codes) so you upload your photos to someone elses photo frame and you get some randoms...

Re:Looks like you can also reset accounts.....

[laughing_badger]

So, a script that changes the content for a video of Obama looking around the room for a few seconds at a random time every few days and then restores the original content. That would probably send some paranoid folks nucular.

Re:zero day vulnerability?

[OolimPhon]

Oh, come on. Don't look at the photostreams with remaining eye.

"Cloudfeature"

[Errol backfiring]

Can somebody mod this up please?
I like the sound of calling every security problem a "cloud feature". Suddenly it does not sound bad at all anymore!

Re:Well...

[ConstantiusChlorus]

I wonder what's happening behind curtains.

Screaming. Finger pointing, witch-hunts and frantic resume polishing. The usual.

Re:zero day vulnerability?

[Qzukk]

If I took some pictures from each person and shuffled them around to other people, would I be crossing the photostreams?