The security flaw was a weak five-digit numeric code used to protect the photos, which could be easily bypassed with a script.