A security flaw in AirDrop found by users