Blake Schwendiman's Blog and Blook

I'm speaking to the übergeek crowd for a moment.

This morning I found a security flaw in the Flickr API that allowed simple access to other users' private photos. Actually one of the people who was using my Google Homepage module called Friends' Flickrz pointed out the bug. I looked at it and found that there was indeed a flaw in the API.

I posted a message on the YDN Flickr Developer Support Group at 9:21 this morning. At 9:37 there was a message acknowledging the flaw and announcing the fix. I have retested against the API and it is fixed.

In this era of instant information and web-based collaboration, companies have to move as quickly as Yahoo! did this morning, but it's still impressive to me when they actually do. Kudos again to Flickr.