The popular Android app uses easily guessable Web addresses when users send private photos, videos, and voice messages. Source