kokonut
New Member
- Joined
- Jul 9, 2006
- Messages
- 16,001
- Reaction score
- 2
New update.
As you may know Rep. Anthony Weiner and his, um, fans, blamed Yfrog (i.e. imageshack) for the mysterious tweet and photo of Oscar Meyer Weiner when Weiner said he couldn’t say “with certitude” that the picture wasn’t his. Of course, being highly sensitive of any security concerns Yfrog responded by suspending all e-mail uploads until it could fully check security. On Friday, Yfrog announced the results of its investigation:
They explain on the security front on their blog:
Long story short. A person cannot upload any photos to Yfrog using just a username, as some have claimed. They also say that their e-mail upload system has NOT been hacked or compromised.
So that raises two questions, either he did it or gave someone the password/pin and uploaded the picture. Otherwise if it's truly a hacking incident, and that security was compromised, it should be investigated. Refusing the investigation could very well likely lead to the conclusion that he had something to do with it in one way or another.
As you may know Rep. Anthony Weiner and his, um, fans, blamed Yfrog (i.e. imageshack) for the mysterious tweet and photo of Oscar Meyer Weiner when Weiner said he couldn’t say “with certitude” that the picture wasn’t his. Of course, being highly sensitive of any security concerns Yfrog responded by suspending all e-mail uploads until it could fully check security. On Friday, Yfrog announced the results of its investigation:
yfrog ? Share, Converse and ConnectAfter confirming that our email upload feature has not been compromised in any way – it is now active again (from 5 pm PST today). We appreciate your patience as we work to assure user safety and security. Please always maintain secure passwords and do not share email secret PINs with anyone. Please contact us at is-support@imageshack.us with any questions, if you want your PINs changed or disabled.
They explain on the security front on their blog:
yfrog - BlogAt yfrog, we take security very seriously. We monitor all the activity on our site and network 24/7 to make sure we secure our services, especially the photos and videos of our users. Our commitment is to protect our users’ photos and make sure they are never lost, deleted by accident, or compromised in any way.
Email Upload Security Explained
The email upload feature was introduced as a convenience for users to send emails with their photos as attachments. The yfrog email PIN is given to the user for the sole purpose of uploading photos only to yfrog. As a private email PIN, it should be treated as confidential information, just like passwords.
To secure further, the user should:
not share the email PIN with others.
not include other recipients in the emails sent to yfrog to upload photos.
not forward to other recipients the emails sent to the email PIN to upload photos to yfrog.
Why we Disabled Email Upload
At yfrog, we constantly evaluate our internal security mechanisms across all the facets of our service. Even though our email upload feature has not been compromised or broken into, we are taking this opportunity to evaluate the feature and secure it even further.
Security is Important to Us
Yfrog serves millions of users and over 2 billion requests worldwide every day with minimal or no attacks or disruptions. As we grow, we will continue to take every measure possible to secure our services so that our users’ photos and videos are protected.
Long story short. A person cannot upload any photos to Yfrog using just a username, as some have claimed. They also say that their e-mail upload system has NOT been hacked or compromised.
So that raises two questions, either he did it or gave someone the password/pin and uploaded the picture. Otherwise if it's truly a hacking incident, and that security was compromised, it should be investigated. Refusing the investigation could very well likely lead to the conclusion that he had something to do with it in one way or another.


.