,
13 tweets,
2 min read
Read on Twitter
1. Tonight, my kid's teacher presented us a new website. This is a new trend, this website is used to publish photos of what kids are doing during the day, homework or news.
In 1 hour, I managed to get:
- children's names
- children's date of birth
- children's photos
In 1 hour, I managed to get:
- children's names
- children's date of birth
- children's photos
2. Of course, I also managed to get:
- parent's names
- parent's photos
- parent's names
- parent's photos
3. All the photos are stored in a bucket, no authentication needed...
4. F*ck this sh*t. Ofc, create an account on this website is not mandatory but strongly advise by the teacher...
5. Obviously, this is website has been approved by @EducationFrance...
6. I’m angry and sick of this situation. Parents and teachers blindly trust this kind of website but this website is just an open door to our kids info.
This is not normal, we need more awareness, we need a change
This is not normal, we need more awareness, we need a change
7. I will report these issues to the school, to the company and @EducationFrance. If I don’t do it nobody will do it for me
8. Worth saying, be nice with your kids, don’t upload your kids info to this kind of website
9. This is crazy. I received a lot of messages after this thread. This kind of website is used everywhere in France. I should check them one by one.
10. They also have an Android app. The authentication token used in the network communication is stored in clear text and can be retrieved easily by an external attacker
11. Many concerned parents have sent me messages since last night. I understand the frustration but at first I have to work on solving the problem and contact the right people. If you follow me, you know it will be a pleasure for me to disclose all the details later
12. Reports done, wait and see now
