Yes, I also saw that some of them were marked private. I'm not sure why that was, but I verified that the results coming from the search were all in public albums, and that the actual request from the backend to the search backend was only requesting public photos.
I'll look into what happened with the strange output, but I'm certain nothing private was shared. On Mon, Sep 9, 2013 at 6:23 AM, Laurent Eschenauer < laurent.eschena...@gmail.com> wrote: > Thank you Mike for the quick fix. The issue seems to be fixed for me. > > About the private pictures, I had noticed some pictures in the stream were > marked with <gphoto:access>private</**gphoto:access>, hence my doubts on > the privacy leak. I have not investigated further. > > Kind Regards, > > Laurent > > On Sunday, September 8, 2013 7:33:38 AM UTC+2, Mike Erickson wrote: > >> Thank you for this and the few other posts on the topic. We are >> investigating this issue, but rest assured that no private photos are being >> shared or displayed, and that those you are seeing are only public photos >> similar to what you might find using the recent photos query ( >> picasaweb.google.com/data/**feed/api/all<http://picasaweb.google.com/data/feed/api/all> >> ). >> >> We expect the issue will be resolved shortly. >> >> On a side note, if you don't want to use Firefox (which does a nice job, >> I agree), you can add "&prettyprint=true" when viewing in your browser. >> >> >> On Sat, Sep 7, 2013 at 5:15 AM, Laurent Eschenauer < >> laurent.e...@gmail.com> wrote: >> >>> Hi all, >>> >>> For the last five years, I've been syndicating my Picasa photo feed on >>> my site (http://eschnou.com). I've been doing so using the Picasaweb >>> API, fetching the content at this url, as per the API 2.0 documentation: >>> >>> https://picasaweb.google.com/**d**ata/feed/api/user/userID?**kind=** >>> photo&max-results=10<https://picasaweb.google.com/data/feed/api/user/userID?kind=photo&max-results=10> >>> >>> This morning I woke up and discovered 250+ pictures of random people >>> polluting my blog. I immediately thought I was hacked or something like >>> that, but the issue sees in fact in the API: it returns random user >>> pictures when I fetch my latest pictures. I've tried with both my picasaweb >>> userid and my Google+ id, and the effect is the same. Note that when I'm >>> logged in it works fine. >>> >>> I've also noticed that some pictures seems to be private. Which would >>> mean that Picasa is currently leaking private pictures of random user. To >>> me it looks pretty bad and require an urgent fix. >>> >>> As an example, have a look at Larry Page photostream... (you have to be >>> logged out from Google to witness the weird behaviour): >>> https://picasaweb.google.com/**d**ata/feed/api/user/LarryPage/?**k** >>> ind=photo&max-results=10<https://picasaweb.google.com/data/feed/api/user/LarryPage/?kind=photo&max-results=10> >>> >>> ^^ easier to view in Firefox which parse and display nicely the rss >>> output. >>> >>> >>> Best, >>> >>> Laurent >>> >> >> -- > You received this message because you are subscribed to the Google Groups > "Google Picasa Web Albums API" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to google-picasa-data-api+unsubscr...@googlegroups.com. > To post to this group, send email to > google-picasa-data-api@googlegroups.com. > Visit this group at http://groups.google.com/group/google-picasa-data-api. > For more options, visit https://groups.google.com/groups/opt_out. > -- You received this message because you are subscribed to the Google Groups "Google Picasa Web Albums API" group. To unsubscribe from this group and stop receiving emails from it, send an email to google-picasa-data-api+unsubscr...@googlegroups.com. To post to this group, send email to google-picasa-data-api@googlegroups.com. Visit this group at http://groups.google.com/group/google-picasa-data-api. For more options, visit https://groups.google.com/groups/opt_out.
