[android-developers] Caught an unsecure API call to Picasa in DDMS, which revealed links to private photos

2011-12-13 Thread Serkan Ozel
So I was doing my daily development at work and noticed a Green catlog line which was made by my Android phone to Picasa https://picasaweb.google.com/data/feed/api/user/[MyPicasaUserName] Now when you call this link, it'll give you an XML feed which also includes links to your private photos -

Re: [android-developers] Caught an unsecure API call to Picasa in DDMS, which revealed links to private photos

2011-12-13 Thread Mark Murphy
Security issue reporting instructions are here: http://developer.android.com/resources/faq/security.html#issue Thanks! On Tue, Dec 13, 2011 at 4:38 PM, Serkan Ozel serkano...@gmail.com wrote: So I was doing my daily development at work and noticed a Green catlog line which was made by my

Re: [android-developers] Caught an unsecure API call to Picasa in DDMS, which revealed links to private photos

2011-12-13 Thread Kristopher Micinski
On Tue, Dec 13, 2011 at 4:38 PM, Serkan Ozel serkano...@gmail.com wrote: So I was doing my daily development at work and noticed a Green catlog line which was made by my Android phone to Picasa https://picasaweb.google.com/data/feed/api/user/[MyPicasaUserName] Now when you call this link,