LightShot screenshot URLs easily harvested

4 points by sys32768 ↗ HN
Just a warning to others who may use the popular LightShot screenshot tool that generates prnt.sc URLs. Those URLs can easily be changed by incrementing characters to "walk" through screenshots made by others.

Within a couple of minutes of testing, I saw somebody's 401k and a driver license.

1 comment

[ 4.6 ms ] story [ 15.9 ms ] thread
Last time I saw something like this, it was from someone's browser extension using pastebin as a backend. Wonder if there are anything similar things for this.