- Michelle Wolf embraces vulgarity in ‘Joke Show’ 3 Months Ago
- Influencer gets 14 years in prison for trying to steal domain name at gunpoint 3 Months Ago
- ‘Three Days of Christmas’ is a delightfully dark holiday alternative to Hallmark 3 Months Ago
- The way Trump Jr. holds his own book inspires mockery 3 Months Ago
- Woman facing backlash for no longer wearing hijab in end of the decade photo Today 3:16 PM
- Report: Consulting firm lied about decreasing violence at Rikers Island jail Today 2:36 PM
- TikTok users are sharing things they thought were ‘ghetto’ as kids Today 2:31 PM
- Republicans just blocked a net neutrality vote in the Senate Today 2:24 PM
- ‘Fox & Friends’ host stuck using dad’s account after Twitter suspension Today 1:10 PM
- ‘They’ is Merriam-Webster’s word of the year Today 12:56 PM
- Inside Dolby’s big ‘Star Wars’ retrospective exhibition Today 12:48 PM
- Amazon’s ‘Clifford the Big Red Dog’ reboot isn’t for you—and that’s fine Today 11:50 AM
- Walmart pulls ‘Let it snow’ cocaine sweater, ruining Christmas Today 11:30 AM
- The way Facebook serves political ads could be driving polarization Today 11:10 AM
- A YouTuber simulated a mass shooting from his hotel room—and then posted the videos Today 11:07 AM
Your Instagram followers can give other people access to your private photos and videos thanks to a simple trick that only requires a web browser, BuzzFeed News reports.
All a user has to do is right-click one of your photos, videos, or stories and then select “inspect” to obtain the content’s source URL. That URL will allow anyone, even those not logged into Instagram, to view, download, and share your content.
Further tests by BuzzFeed’s Tech + News Working Group found that stories that have expired after 24 hours can still be accessed for several days after with a URL. And the same trick also applies to your private Facebook posts.
In a statement to BuzzFeed News, however, Facebook argued that the discovery was not as significant as it seems.
“The behavior described here is the same as taking a screenshot of a friend’s photo on Facebook and Instagram and sharing it with other people,” a Facebook spokesperson said. “It doesn’t give people access to a person’s private account.”
But BuzzFeed News says the hack isn’t comparable to taking a screenshot for numerous reasons.
“These public URLs contain some basic info about the photo or video they link to, including details about how it was uploaded and photo dimensions,” BuzzFeed News says. “They also prove authenticity; you can’t fake one. Beyond this, deleted photos and videos are being stored and accessed on Facebook’s content delivery network after a person took action to remove them from their profile.”
It remains to be seen whether Facebook removes the work-around.
- Facebook is developing Threads for Instagram, and it looks very familiar
- Facebook explains privacy concerns ahead of iOS 13
- Popular period tracking apps are sharing users’ private sexual health info with Facebook
H/T BuzzFeed News
Mikael Thalen is a tech and security reporter based in Seattle, covering social media, data breaches, hackers, and more.