Instagram "Upload your data." Security. Security. Mistake. Some user passwords.

  • 20.11.2018, 02:28,
  • Tech
  • 0

 
Instagram told several users that their password information might be compromised due to an error in the new tool "Upload your data”. Instagram has confirmed that the URL used when using this tool also contains information about the user's password, which should not be so. If this tool was used on a shared computer, this password information in the URL could potentially lead to misuse. The company notes that it has already fixed the error, but recommends that users change their passwords nonetheless.

The "upload your data” feature was launched in April, and it allows users to export their photos, videos, archived stories, profile, information, comments and non-numeric messages. This tool collects all your data, prepares it for download, and then sends the user a link by email, clicking that will allow users to download all their Instagram data. Due to a security error, the link also included the user's account information in error, violating the user's privacy. The information says that an Instagram spokesman confirmed that the problem was "found inside the country and affected by a very small number of people.”

Although the link was transmitted to the user privately by e-mail, if the link was available through a public or shared computer, it could jeopardize the credentials of user accounts. Instagram says that it has already fixed the problem. "If someone sent their login information to use Instagram’s Upload Your Data tool, they could see their password information in the URL of the page. This information was not open to anyone else, and we made changes to prevent it from happening any longer, ”an Instagram spokesman told The Verge.

Although the problem has been fixed, a security researcher quoted by The Information reveals a big problem with the error, saying that it would be possible only if Instagram saved the users' passwords in text format. An Instagram spokesman disputed this claim, stating that the company hashes and salts store their passwords. Although Instagram says that the problem affected a very small number of people, we recommend immediately changing the password and using the data upload tool with caution.

Source: gadgets.ndtv.com 


Add comment
  • Comments
  • Today
  • Reads