This isn't even a security hole, it's a complete security disaster. Did they even think through the process for five minutes before they built that? I mean, there aren't even any hacks involved.
Nice find.
Nice find.
I doubt law enforcement would see it that way. Downloading photos with this method is not much different than guessing somebody's email or voicemail password; you're accessing something you're not supposed to.
See 18 U.S.C. § 1030(a)(2)(C) and § 2701.
It is not enough for purposes of these laws to accidently or
unintentionally wander into areas on the internet where valuable
or secure information may reside. If one enters such an area
using computers or computer technology, his/her intent must be
to steal, destroy or defraud to be found guilty of a crime.
[1] http://www.esecurityplanet.com/headlines/article.php/3879756...