The Cybernews research team discovered an unprotected web service streaming user data without authorization or validation.