O2 responds to MMS leak
THOUGH O2 has yet to comment on allegations that the company has allowed access to customers MMS messages, photos, and mobile phone numbers, the coverage of the incident has not passed without notice.
It seems O2 is unable to secure the legacy MMS application - utilised by poorly configure MMS capable phones, or non-MMS capable phones like the newly launched Iphone 3G - and has instead had to resort to shutting down the service.
Shortly after the INQUIRER posted news of public access toMMS messages indexed by Google, O2's legacy MMS service ceased to function.
Now if you attempt to go to any of the links indexed by Google (here), you will receive a standard Apache error.
Resorting to the root of the sub-domain will show the test page for Apache, viewable on a default install of the HTTP server software.
It seems plan B for O2 consists of resorting to the most desperate of measures. µ
Share this:
Business Intelligence Software
Customer Relationship Management (CRM)
Enterprise Accounting Software
Enterprise Resource Planning (ERP)
Enterprise Systems Management
It's still cached by Google though! Seems like O2 are going to have to speak nicely to Google about this one too!
Evidence of O2's ineptitude can still be found in Google's Cache - O2 can't deny it!
You can still see the picture by using googles "Cached" function!
What's even more amusing is that if you click on the "cached" link of any of the google search results, you still get the full page (mobile number, pictures and all!). Looks like the photos are served from a different server, which they still haven't turned off or secured...
You cant turn off google cache though ;)
...Google seems to have chached some of the content.
They haven't solved the problem, just papered over it while they reprogram the authentication (I hope). They only appear to be using Apache's rewriteengine to return an error if referred by an external site.

If you copy modify and paste the urls directly then they are accessble, but are anonymous and completely uninteresting!

O2 should just approach Google et al to prevent these URLs being indexed.

Chances are that the users would prefer security by obscurity so they can send urls to their friends, but a simple password would help a lot.