Money transfer app Duc exposed thousands of driver’s licenses and passports to the open web
A publicly accessible Amazon-hosted storage server allowed anyone with a web browser to access potentially hundreds of thousands of people’s personal data without needing a password. This included driver’s licenses, passports, and other personal information…