Nearly a million passports and photo IDs were left unprotected on the public internet

https://www.theverge.com/tech/947157/passports-data-breach-cannabis-club-systems-nefos-puffpal

239 points · 7 comments · view on lemmy.world

7 Comments

m4ylame0wecm@lemmy.zip · 41 pts · 66d (3 replies)

An Irish company called Cannabis Club Systems (CCS), formally Nefos Solutions, develops and provides the software these clubs use for sales, accounting, and admissions, including a verification system where receptionists upload your IDs and selfies to Nefos’ cloud.

_edge@discuss.tchncs.de · 29 pts · 66d (2 replies)

What were they smoking when they hashed out this solution?

masterofn001@lemmy.ca · 7 pts · 66d

No need to get salty.

Maeve@kbin.earth · 1 pts · 54d

πŸ€£πŸ€£πŸ€£πŸ€£πŸ‘πŸ‘πŸ‘

eager_eagle@lemmy.world · 35 pts · 66d

he discovered that those passports, drivers licenses, and photo IDs were stored at public URLs as simple as this: https://ccsnubev2.com/v8/images/_%7Bclub%7D/ID/%7Buser_id%7D-front.jpg

πŸ€¦β€β™‚οΈ

Treczoks@lemmy.world · 24 pts · 66d

This will make a lots of kids happy! Free age verification materials!

overstep8556@jlai.lu · 1 pts · 66d

Paywalled.