•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•

On April 17, Hanoi Police issued a warning about the risk to personal data safety from photobooths integrated with QR codes, a service that has become increasingly popular in large cities.
In the context of rapid digital transformation, conveniences described as fast, compact, and convenient are widely used by many people, especially young users, often with limited attention to safety.
Photobooths are now widespread in shopping centers, festivals, events, and public spaces. Users can take a photo, receive a printed photo on site, and download the digital copy to their phone by scanning a QR code.
According to authorities and cybersecurity practitioners, the vulnerability is linked to the download mechanism via QR codes. Most photobooth systems store images on a server and then provide users with an access link encoded in the QR code.
The issue, they said, is that many systems are not designed with robust security. Some use simple, sequentially structured URLs or easily guessed patterns, which can allow someone to alter a character in the link to access data belonging to another user.
This type of vulnerability is described as common but relatively easy to exploit. Personal photos—including family photos and children’s photos—can be accessed without the owner’s knowledge, creating privacy risks.
Exploiting the vulnerability does not require complex techniques. If access control is not tight, criminals can use automated tools to collect large amounts of image data in a short time.
In the context of rapid AI development and facial recognition, leaked data can be used to forge identities, create fake profiles, or support online scams. The risks extend beyond simply exposing photos.
Hanoi Police advised people not to publicly share photobooth image links on social networks or share them with many people if access is not properly controlled. If the system lacks appropriate security, these links can be accessed freely.
Users are also urged not to assume that devices in public spaces are completely safe. Before use, they should pay attention to the operator’s information and the system’s security level to actively limit the risk of data leakage.
In the digital era, police said, a single scan can become a vulnerability that leads to personal data leakage. Convenience, they added, always comes with risk, and actively protecting personal data has become a necessary skill for every user.
Premium gym chains are entering a “golden era” that is ending or already in decline, as rising operating costs collide with shifting consumer preferences toward more flexible, community-based ways to exercise. Long-term memberships are shrinking, margins are pressured by higher rents and facility expenses, and competition from smaller, more personalized…