

When an authorized user loads a piece of content on Instagram in a browser, it’s trivial to look in the HTML and find a direct URL to where the image or video is sitting on a server. ZOMG! That’s terrible. Wait, what? Tom McKay says it Isn't a 'Hack'-but Still, Heads Up: BuzzFeed is calling this a “hack,” but what’s really happening is Internet 101. particularly egregious given Facebook's ongoing privacy missteps. If someone were to publicly share one of your private images or videos without your permission, you would have no idea who had done so or how many people had seen it. … Because all of this data is being hosted by Facebook’s own content delivery network, the work-around also applies to private Facebook content. The hack works even when images and videos in a private Instagram story … expire or are deleted. … A user simply inspects the images and videos that are being loaded on the page and then pulls out the source URL can then be shared with people. What’s the craic? Ryan Broderick, Ryan Mac, and Logan McDonald breathlessly “report”- A shockingly simple work-around allows your followers to share private photos and videos: Photos and videos posted to private accounts on Instagram and Facebook … can be accessed, downloaded, and distributed publicly … via a stupidly simple work-around. Your humble blogwatcher curated these bloggy bits for your entertainment.

In this week’s Security Blogwatch, we party like it’s September 9508, 1993. Welcome to the eternal September of Internet clickbait. The naïve “revelation”? If you share something with someone, that person could make a copy. Don’t you think Zuck’s properties have enough real privacy issues without inventing fake ones? BuzzFeed is under fire this week, for spreading a non-story about privacy on Facebook and Instagram.
