Popsugar’s celebrity look-alike app is leaking users’ photos
They’re stored in an easily accessible AWS storage bucket.
I can't think of a more fitting way to end 2018 than with another, final data leak. This one is from #Twinning tool, the popular new app from Popsugar that matches your selfie with your top five celebrity look-alikes. Turns out, while you were uploading your face and crossing your fingers for who you would or wouldn't be compared to, Popsugar was doing a poor job of protecting your images.
The photos that #Twinning users upload to the app are kept in an Amazon Web Services storage bucket, TechCrunch reports. According to the publication, the web address for that storage bucket can be found in the #Twinning website's code and once you plug it into a web browser, you then have access to any of the photos users have uploaded.
While this may not be the most egregious instance of a privacy violation, it's just another example, in a year full of them, of how little control we have over our data. And since privacy is now on so many people's minds, it's a little confusing as to why Popsugar would allow such an easily avoidable oversight.
TechCrunch reached out to Popsugar about the leak, but said it hadn't yet heard back.