Instagram, one of the most popular social media platform, has shaken the social networking world by the news of one of its security bugs might intrude some of the users’ accounts and leaked their passwords. An Instagram official spokesperson later puts light on the issue and stated that the issue been taken care of internally and a very few numbers of Instagram users have been affected by this bug. “If someone submitted their login information to use the Instagram ‘Download Your Data’ tool, they were able to see their password information in the URL of the page. This information was not exposed to anyone else, and we have made changes so this no longer happens,” the Instagram spokesperson told to The Verge. There might be some chances that these affected Instagram users might be logged into the shared computers or vulnerable network during the data breach.
Notably, only users who have used “Download Your Data” feature in the Instagram site were affected by this bug. When clicked on the “Download Your Data” option, the bug shows users’ password in the Instagram link URL and sent to the Facebook’s servers as well.
Instagram has launched this Data Download Tool feature in the month of April 2018. This feature is already available on Facebook, a parent company of Instagram, that provides users with an option to download a copy of their data uploaded on the social networking sites such as Facebook and Instagram. This feature is usually for the users who are willing to download a copy of their data before deactivating their accounts of Instagram or Facebook.
A security researcher has stated that this data breach could only be possible if Instagram stores its users’ password in plain texts. Instagram, on the other hand, has opposed it and affirmed the users that it hashes and salts their passwords for better security. Furthermore, the company assured that the issue has now been resolved and it won’t trouble more users. Instagram has also recommended the affected users to change their Instagram passwords for the safety purpose.
Notably, not so long ago, a bug had affected as many as 50-million Facebook accounts and exposed them to hacking in October 2018. Interestingly, these accounts also include Facebook CEO Mark Zuckerberg and COO Sheryl Sandberg’s personal accounts.
Meanwhile, Instagram has introduced some new features earlier this month. These features include the time-tracking feature that helps users track the time they spend on Instagram. This feature enables users to set a daily reminder to limit their daily usage of the Instagram site. Another feature allows users to shop the products they see on Instagram videos.