Sex club for closeted bi women put all their risqué full-body "audition" photos in a publicly accessible folder
by Cory Doctorow from on (#2AFQ3)
Skirt Club, a sex site "for girls who play with girls," required prospective members to upload "full body" photos with their applications; these photos were stored in world-readable folders with easily guessable names. When the site's owners were contacted about this, they promised action but did nothing for three weeks, and then made an incomplete job of it. They have not notified their users about the breach. (more")