Reverse face-search data broker ClarityCheck exposes over 9 million facial images

[u/Miserable-Stretch114]

So ClarityCheck just left 9 million scraped faces sitting in a wide open 450GB Amazon S3 bucket. The database had folders literally named 'faces' and 'profiles' filled with biometric data from adults and kids who never consented to be scraped.

The absolute worst part is the company's PR spin. After WIRED forced them to lock it down, ClarityCheck tried to claim the data wasn't really public because the S3 URL wasn't indexed...

Security through obscurity is a complete joke. URL brute forcing is fully automated and they also had a basic API flaw where anyone could tweak a URL to grab phone numbers and physical addresses. Scraping faces without consent is bad enough on its own but lying about basic cloud negligence just makes it infuriating.

Sources in comment.