Hi, and welcome back to me and talking about whatever I want. Today I want to talk about
something that is a little shocking. If anything, I guess I could say I'm more shocked that it's
not a bigger issue, but before I get into that, I'd like to do my comments shout out. Actually,
instead of shouting out the comment from yesterday's video, this comment shout out actually
goes to Hawkspire. That's right. I'm shouting out a whole YouTube channel because Hawkspire and my
friend, Julian, actually helps me go through and find the majority of the images I'm going to be
showing on screen. And together, he and I looked at thousands of images for this video to work.
And of course, for safety sake, I have to say, there's going to be addresses, faces,
private information. However, I censored all of that because while these people are basically
responsible for doxing themselves, I don't want to go and then in turn, dox them further. So,
this video is not meant to call out the people in question. It's meant to call out Lightshot.
All right, so Lightshot is a screenshot program, and as you can see, it's some
pretty standard looking stuff. Basically, when you take a screenshot on your computer,
it doesn't really go anywhere. You have to paste it somewhere. And on top of that,
if you want to just snip a specific part of your computer, then you have to use a snipping
tool. Long story short, it's a lot of work for something that Lightshot makes a lot easier.
I don't know the exact number of people who have downloaded Lightshot, but from what I can tell,
it's a ton of people who use this on a daily basis. It's been around for over 10 years and
it's useful for things like discord, because when you take your screenshot, Lightshot will
create a URL for it. So, at the top of the page, it'll always say, P-R-N-t.S-C/a random string of
numbers and letters there's that makes up your image. Six characters. I held up seven fingers.
Six characters, that's it. So if you type any string of six numbers or letters in the URL,
you're probably going to wind up with somebody's screenshot and people are posting a lot of
sensitive information, which I'm going to go through. So, Julian kind of categorized all the
images into various folders for me, and probably the most we had were private conversations.
As you can see, we're getting them from WhatsApp, Discord, Skype. Some of them are funny. Most of
them are harmless. It's a little weird to type up random numbers and see somebody's out of context,
Discord message from two years ago, but in my opinion, where things start
getting creepy is when we get into the selfies. For some reason, people screenshot other people's
faces a lot. Kind of a lot, a lot. My guess is they're coming from Facebook or something. I don't
know. The thing is though, it's a huge violation of privacy because let's be honest, the person
whose face is being screened shot, screenshotted, what's the past tense of screenshot? The person
in the screenshot doesn't know that somebody has used a Lightshot to take a capture of the image,
therefore uploading their image to Lightshot's website. Thousands upon thousands of people
now have their faces just floating around on Lightshot, and as we go into the video,
you're going to realize that publicizing things without people's knowledge or consent is pretty
much the largest issue with this whole debacle, but it gets a bit weirder than
that because while most of the selfies were adults, a lot of them actually were kids.
So, these are like school age kids. Some of them are really small and it really makes me question,
why are people screenshotting pictures of kids? In all fairness, it could be kids screenshotting
their friends or something, not understanding how Lightshot works and that this information is on
the internet, but parents out there might have pictures of their kids floating around without
knowing, just available to anybody. Again, I would say that's another huge issue with Lightshot.
It doesn't just affect the people using it. If your son, Timmy, Snapchatting his friend, Jimmy,
and then Jimmy just screenshots that using... actually wait, Snapchat's not on PC. If your son,
Timmy, is Skyping his friend, Jimmy, I know how communication works online. I definitely have
friends and he uses Lightshot for that. Now he's not only affected Timmy, but Timmy's parents,
because I'm sure you could work hard enough to prevent your kids from making bad choices online,
but how can you prevent other people from screenshotting them in private context?
Really, the harder I think about Lightshot, the creepier it gets. It's like a secondhand
privacy violation for everybody involved. Also, there were babies, literal babies. Why are you
screenshotting a baby? Full disclosure, anytime I screenshot somebody's face,
it is 1000% to show it to other people, people who have no other way of seeing that person easily.
So in what context does that make sense to apply to a baby? Now again, some of this could just be
people not understanding how Lightshot works and that they are literally capturing everything and
putting it on the internet, just a click away with each screenshot they take. And I can tell people
don't know that they're during that because there were also a lot of not safe for work pictures.
It's a weird mix of not safe for work content and content that's not necessarily inappropriate but
was clearly not meant to be posted online. Most of these were just straight up from Skype. So, that
private Skype conversation you thought you were having with your Bay, she screenshotted it, and
now you're just on the web. I also saw a lot of people screenshotting their own computer files,
which congratulations, your files are now on the internet. Honestly, I saw so many pictures
of people that I don't think anyone intended for anyone to really see, but now they're on
the internet. Also, one of the computer files, screenshots had a bunch of photos of somebody in
a bikini, a lot of bikini pics, but they looked really young. So, I'm just going to move on.
Ah, yes, of course, why wouldn't there? One of them was straight up from Skype,
so rest in peace to that guy. I don't think any of those guys were aware, but it happened
but hey, if they were unsolicited photos or videos, then I guess that's what you get.
So, shying away from the photographs of which there were many, Lightshot has a ton of addresses,
just straight up physical addresses, with people's full name, like John Smith, 123 Pleasantville,
zip code and everything. And not just the U.S. either. I saw addresses from all over the world.
Most of them are from online orders. So, their shipping addresses that people are screenshotting
for some reason, I guess they're trying to make their own receipts, but in the process,
they are uploading their address to the internet. Also, I will say, one of these receipts was for
$8,000 on a watch, one Rolex watch. How are rich people real? That's all I want
to know. I can't wrap my head around it. Besides the addresses, there were just
miscellaneous screenshots full of sensitive information. I saw a Google Play gift card,
which didn't work. Yes, I did try it. I also saw a lot of password lists. These aren't just
normal people. These are web developers trying to screenshot their users. One of
them actually had people's addresses attached to it. One guy tried to reset his password twice,
both of which were on Lightshot, which literally makes me wonder if someone stole his password in
between those two times. My guy, maybe that's why you keep getting locked out of your account
because you keep uploading your password to Lightshot. There's also a weirdly high amount
of job applications, not like job applications, but profiles on job application websites. Why
do you need to screenshot those exactly? I guess they were trying to save them for later.
I wonder if they got the job. Maybe I'll just call and ask since their phone number is now on
the internet. Are you seeing what I'm saying about this being like a secondhand privacy
violation? People using Lightshot aren't just violating their own privacy. They're violating
everybody's privacy. I also saw what initially just seemed to be one of those screenshots full
of usernames that developers use, but then I realized it's actually for a gambling website
and it was keeping track of the various users, and I'm pretty sure I know which website it is because
it says NetEnt right there. NetEnt, however you say that, and NetEnt is a games company. They
are on the Play store. What I'm trying to say here is, I'm pretty sure NetEnt just uploaded
their own internal document to Lightshot where I can see that they are straight up rigging their
slots game. So that was a fun bit of information. Then again, I could have told you that without
seeing NetEnt's internal documents. Oh yeah, and also, there is an entire ID. It wasn't censored at
all. This lady's entire ID is on the internet. Lastly, there were just weird things on the
website that I didn't want to get into. There's a picture of somebody sleeping. That's weird
because a) you didn't consent to be on Lightshot in the first place, but then b) you're not even
awake to know that the picture was taken at all. There were some comments on there that
were bordering on criminal and others, which were just highly inappropriate, things that
you probably wind end up on a FBI watch list for. There were pictures of people doing awful things
that I don't want to talk about because this video is supposed to be kind of lighthearted.
And of course, I did save the best thing for last. There was $15,000 just sitting
in an account that had its username and password publicly available on the website.
It was from the private conversations. When I mentioned someone had a cryptocurrency account,
basically in this conversation, somebody asks the other person, "Hey, can you please give me your
account info?" And that person's like, "Okay." And then the person asking, screenshots it, uploading
it to Lightshot and broadcasting it to the entire internet. Now, thankfully, I don't think anyone
saw it between whenever that happened to now, because I doubt the $15,000 would still be there.
But by a long shot, the $15,000 might be tied with the not safe for work images for being the biggest
violation of privacy I saw on the entire website. So, my conclusion to all of this, I don't have
one. When I found out that this was happening and nobody knew, I was like, that's amazing. No,
wait, that's terrible, but it's going to make one heck of a YouTube video. Basically, just ask your
friends and family, if they use Lightshot, and then stop them from using Lightshot,
specifically to capture sensitive data. And if you have been using Lightshot,
my recommendation is to just delete all of your photos. A lot of the URLs that we typed up,
did say that this image was no longer available. So if you delete your photos from Lightshot,
I'm assuming it deletes them from the website. Clearly, people don't know that,
otherwise their addresses, their nudes, their everything wouldn't just be floating around on
the internet. And on top of that, I personally believe that Lightshot is somewhat responsible
for this. Now, just so we're absolutely clear, it literally says in the terms of service in
no uncertain terms, I guess that's why it's called terms of service, that the pictures
you take are publicly available via a URL and that anybody can access them. And that Lightshot
is not meant to be a secure image hosting service, but who reads the terms of service?
I personally think it wouldn't hurt just to put a little info box on the site that says, hey,
all of your photos are available for anyone to view at any time. It sounds like a good thing,
but if you were going there with the intention of capturing private info, you would be like,
"Oh, okay. Maybe I won't screenshot my literal bank account." I just had to let everybody know
because I've seen a couple of people talking about it. I haven't personally seen any YouTube
videos about it. It doesn't mean they're not out there, and I didn't even see any news
articles about it. But yeah, that's the story of how there's just thousands upon thousands,
if not millions, of sensitive photos and account information, six letters and numbers away. So,
thought you might want to know that. Anyway, with the state of modern technology and the
way networks work and how advanced hackers are getting, they honestly could get access
to any of that stuff, even if people didn't put it on Lightshot, so honestly who cares?