- Former developer at software company deletes his code to protest its ties to ICE Today 4:21 PM
- A mysterious website is doxing Hong Kong protesters and journalists Today 1:44 PM
- The best ‘Skyrim’ followers and how to get them Today 1:26 PM
- Why Joel Osteen gets cyberbullied every time Houston floods Today 12:40 PM
- How to stream Jets vs. Patriots in Week 3 Today 12:39 PM
- 10 indie dating simulator games you should be playing Today 12:31 PM
- How to stream Packers vs. Broncos in Week 3 Today 12:14 PM
- Saudi crown prince’s former adviser suspended from Twitter Today 11:57 AM
- How to stream Cowboys vs. Dolphins in Week 3 Today 11:57 AM
- YouTuber to pay restitution after a teen fan died copying her video Today 10:36 AM
- Antonio Brown sent ‘intimidating’ texts to an accuser, including a pic of her children Today 9:38 AM
- Facebook suspended tens of thousands of apps after Cambridge Analytica scandal Today 8:24 AM
- How to stream Browns vs. Rams on Sunday Night Football Today 6:00 AM
- How to watch ‘NFL Primetime’ on ESPN+ Today 5:00 AM
- How to stream Liverpool vs. Chelsea Friday 6:45 PM
Your Instagram followers can give other people access to your private photos and videos thanks to a simple trick that only requires a web browser, BuzzFeed News reports.
All a user has to do is right-click one of your photos, videos, or stories and then select “inspect” to obtain the content’s source URL. That URL will allow anyone, even those not logged into Instagram, to view, download, and share your content.
Further tests by BuzzFeed’s Tech + News Working Group found that stories that have expired after 24 hours can still be accessed for several days after with a URL. And the same trick also applies to your private Facebook posts.
In a statement to BuzzFeed News, however, Facebook argued that the discovery was not as significant as it seems.
“The behavior described here is the same as taking a screenshot of a friend’s photo on Facebook and Instagram and sharing it with other people,” a Facebook spokesperson said. “It doesn’t give people access to a person’s private account.”
But BuzzFeed News says the hack isn’t comparable to taking a screenshot for numerous reasons.
“These public URLs contain some basic info about the photo or video they link to, including details about how it was uploaded and photo dimensions,” BuzzFeed News says. “They also prove authenticity; you can’t fake one. Beyond this, deleted photos and videos are being stored and accessed on Facebook’s content delivery network after a person took action to remove them from their profile.”
It remains to be seen whether Facebook removes the work-around.
- Facebook is developing Threads for Instagram, and it looks very familiar
- Facebook explains privacy concerns ahead of iOS 13
- Popular period tracking apps are sharing users’ private sexual health info with Facebook
H/T BuzzFeed News
Mikael Thalen is a tech and security reporter based in Seattle, covering social media, data breaches, hackers, and more.