- Cooking Mama’s return whips up a fresh batch of memes Tuesday 8:18 PM
- Influencer body-shames model, Photoshops photo of self to ‘prove point’ Tuesday 7:27 PM
- Boosie Badazz goes on transphobic rant about Dwyane Wade’s daughter Tuesday 6:34 PM
- Royal Family’s website accidentally links to porn instead of charity Tuesday 5:39 PM
- Republican senator spreads false conspiracy about coronavirus Tuesday 5:11 PM
- New DNA technology could help exonerate Black man serving life sentence Tuesday 4:24 PM
- ‘SNL’s’ Kenan Thompson to host the White House Correspondents’ Dinner Tuesday 3:58 PM
- Singer Summer Walker dragged for insensitive HIV comments Tuesday 2:39 PM
- This video of a teddy bear getting steam cleaned makes a perfect meme Tuesday 2:27 PM
- Ted Cruz goes on Twitter tirade over proposed vasectomy bill Tuesday 2:22 PM
- Billie Eilish says she’s stopped reading Instagram comments Tuesday 2:13 PM
- Christian group blames satanists for Twitter poll results Tuesday 1:41 PM
- Coronavirus has pandemic-themed video games topping charts Tuesday 12:58 PM
- Bloomberg said kids are drawn to socialism because they think it involves social media Tuesday 12:55 PM
- Jake Paul gives ill-informed advice on how to deal with anxiety Tuesday 12:25 PM
Your Instagram followers can give other people access to your private photos and videos thanks to a simple trick that only requires a web browser, BuzzFeed News reports.
All a user has to do is right-click one of your photos, videos, or stories and then select “inspect” to obtain the content’s source URL. That URL will allow anyone, even those not logged into Instagram, to view, download, and share your content.
Further tests by BuzzFeed’s Tech + News Working Group found that stories that have expired after 24 hours can still be accessed for several days after with a URL. And the same trick also applies to your private Facebook posts.
In a statement to BuzzFeed News, however, Facebook argued that the discovery was not as significant as it seems.
“The behavior described here is the same as taking a screenshot of a friend’s photo on Facebook and Instagram and sharing it with other people,” a Facebook spokesperson said. “It doesn’t give people access to a person’s private account.”
But BuzzFeed News says the hack isn’t comparable to taking a screenshot for numerous reasons.
“These public URLs contain some basic info about the photo or video they link to, including details about how it was uploaded and photo dimensions,” BuzzFeed News says. “They also prove authenticity; you can’t fake one. Beyond this, deleted photos and videos are being stored and accessed on Facebook’s content delivery network after a person took action to remove them from their profile.”
It remains to be seen whether Facebook removes the work-around.
- Facebook is developing Threads for Instagram, and it looks very familiar
- Facebook explains privacy concerns ahead of iOS 13
- Popular period tracking apps are sharing users’ private sexual health info with Facebook
H/T BuzzFeed News
Mikael Thalen is a tech and security reporter based in Seattle, covering social media, data breaches, hackers, and more.