Claude Code audit uncovers 14,219 secret front-camera photos hidden in Android cache
natesiggard · x · 2026-10-29
A user running a security audit with Claude Code discovered serious privacy issues:
- Android: 14,219 front-camera photos they never took, sitting in a system cache and a Google Play Services folder, including Face Unlock infrared frames. Every file had timestamps and GPS, spanning 15 months, invisible in Gallery or Recently Deleted.
- iPhone: the PhotoData/Thumbnails directory still held 145,763 files the user had permanently deleted over 2023–2025, including passport photos.
- Core risk: any app with file access could read these remnants — deleting photos does not mean they're gone.
Method: full laptop backup, then ask Claude Code to find front-camera files missing from the photo library, which surfaced the hidden directories.
More from coding & agent
- Developer replaces Siri with local LFM3-Audio-2B, cutting home control latency from 3s to 0.54s — gregbarbosa · 2026-10-29
- Open-Source Alchemy Framework Crosses 1 Million npm Downloads — samgoodwin89 · 2026-10-29
- AI writes, tests and reviews the code — and engineers are losing understanding of their own systems — julianweisser · 2026-10-29
- Coding agents burn 95-99% cached tokens per benchmark task, token usage chart shows — AccBalanced · 2026-10-29
- Open-source screen recorder Cap v0.6.2 ships 89% faster share links, 2.8x exports — JosephJacks_ · 2026-10-29
- Professor builds videos with Codex and Blender, where creative goals resist alignment — CSProfKGD · 2026-10-29