A colleague of mine just installed the new iPhone Flickr app. He then added me as his contact. As soon as he did, he could see all my private photos before I added him as a contact! I believe this is a major security flaw, that gives anyone with an iPhone access to photos that are not publically shared.

Update: I reapplied the security settings on all of my photos, to make sure that they are correct. This seems to have solved the issue partly. I still do not know why photos were visable in the iPhone app and not my photo stream online.

There is speculation going that Twitter will be launching Twitter Connect, an identity "light" service similar to Facebook connect. This naturally started a debate over at Friendfeed.com. Rob Diana wrote a commentary on the topic at http://regulargeek.com/2009/04/20/can-openid-and-oauth-lead-us-to-manageable-security/ that I though you might like to read. (Click "Read More" to continue.) Read more »