O2 has closed its web site for viewing MMS messages sent to non-MMS compatible handsets after a serious flaw in security was found. The web site was used by users with MMS capable handsets who sent pictures to users without MMS handsets like the new iPhone 3G.

Owners of non-MMS capable handsets received a text with a link to view the picture online. It was discovered that the O2 site hosting the images had no security or log-in procedures and that anyone could view the images.

According to vnunet.com Google even indexed some of the images sent by O2 users and that a simple Google Image search not only found the images, but the user’s phone number was with the images as well. "We have temporarily taken down our MMS web-based viewing service while we investigate this issue fully. This has no impact on the service for customers with MMS-enabled handsets," said an O2 spokesperson.

Via Vnunet