Reverse-Lookup Service Exposed Millions of Photos of People's Faces

The people-search tool ClarityCheck says its reverse image search service is "private and secure"--but it left a database containing more than 9 million image files exposed. When someone uploads a photo to the people-search tool ClarityCheck, the website has a clear message: "Your reverse image search is private and secure." New research, though, shows that the website left more than 9 million image files, including photographs of people's faces, publicly exposed . And a second misconfiguration publicly exposed people's email addresses and phone numbers. Overall, according to findings from independent security researcher Jeremiah Fowler, the exposed ClarityCheck database contained roughly 450 GB of images, including what appeared to be profile images, screenshots, and other photographs of adults, teenagers, and children.