The bug, pointed out to Facebook by Solapur-based bug bounty hunter Mayur Fartade, allows people to access archived posts, Stories, Reels and IGTV.
Thanks to Mayur Fartade who spotted the bug, Facebook has now resolved the issue that allowed hackers to see targeted media on Instagram. Fartade may have potentially saved many from illegal intrusion into their private photos and videos on the social media platform.
Fartade, skilled in C++ and Python, had explained the bug in a Medium post. As per him, attackers could access private/archived posts, reels, stories and IGTV “without following the user using Media ID.”
Furthermore, these photos, videos and details about specific media could also be stored by intruders using brute-forcing Media ID’s.
Fartade’s blog said, “Data of users can be read improperly. An attacker could be able to regenerate valid cdn url of archived stories & posts. Also by brute-forcing Media ID’s, an attacker could be able to store the details about specific media and later filter which are private and archived.”
This information could also be leveraged to intrude into Facebook pages linked to a person’s Instagram account.
The bug was reported on April 16 via the Facebook Bug bounty program. Facebook replied to Fartade after three days requesting further information about the bug. The issue was resolved on June 15. The social media giant then thanked the hacker for good work with a Rs 22 Lakh reward on April 29.
In a letter to Fartade, Facebook thanked the young techie for his support, “After reviewing this issue, we have decided to award you a bounty of $30000. Below is an explanation of the bounty amount. Facebook fulfils its bounty awards through Bugcrowd and HackerOne. Your report highlighted a scenario that could have allowed a malicious user to view targeted media on Instagram. This scenario would require the attacker to know the specific media ID. We have fixed this issue. Thank you again for your report. We look forward to receiving more reports from you in the future!”
Mayur Fartade, a computer science engineering student, pursues bug bounty hunting as a part-time gig on his way to becoming a software developer.
Instagram Is Rolling Out Reels Replies, And Will Be Testing A New Feature Which Informs …
Instagram has added a few more social features to the platform, with Reels Replies being rolled out. Along with the Replies, anew feature is being tested that shows when two users are active together in the same chat.
Reels has been performing much better than perhaps even Instagram ever anticipated. The TikTok-inspired new video format (which officially claims to have absolutely no relation to the former) had some trouble really finding its footing initially. However, Reels has grown massively and while it may not be a source of the most direct competition to TikTok, it is indeed a worthy alternative.
Reels has grown to the point that it has a massive creator program attached to it, and the video format has even been migrated to Facebook with the goal of generating further user interest there. Naturally, with such a successful virtual goldmine on its hands, Instagram has been hard at work developing new features and interface updates for Reels, integrating it more and more seamlessly into the rest of the social media platform. Features such as Reels Replies are a major part of such attempts at integration.
Reels Visual Replies are essentially just what they sound like: A Reel that is being used to reply to someone. It’s a feature that’s been seen frequently across TikTok as well. Reel Replies essentially take a user’s comments, and reply to them in video format. The comment will then show up within the Reel itself as a text-box, taking up some amount of space, and showing both the user who issued said comment along with the text. The text-box is apparently adjustable, with users having the ability to move it around and change its size depending on where it obstructs one’s Reel the least.
Overall, it’s a fun addition to the Reels format, even if the credit should be going to TikTok first. At any rate, it’s an example of Instagram really utilizing Reels’ social media capabilities, outside of just serving it up as a form of entertainment.
Speaking of social media capabilities, a new feature might help alleviate one of the most common frustrations encountered across all such platforms. Isn’t it annoying when you see that a friend’s online, but isn’t replying to your chat? Sure, they’ve probably just put their phone down to run a quick errand, but there’s no way for you to know, right? Well, there sort of is now! Instagram is beta testing a new feature via which if both users are active within a chat, the platform will display that accordingly. It’s a work-around, sure, and one that’s currently being tested for usefulness, but it’s still a very nice, and even fresh, addition to the social media game.
— Yash Joshi (@MeYashjoshi) December 10, 2021
5 apps for scheduling Instagram posts on iPhone and Android
Alright, we get it. You’re an Instagram Nostradamus.
You know exactly what you want to post and when you’re gonna want to post it. Maybe there’s a meme or comment you want to make that you know will be totally relevant for a future moment or event. Or it could be that you’re an influencer and you want to make sure you keep a steady stream of content coming, so you want to schedule posts for times when you know you won’t be active (or won’t have internet access).
You’ll be happy to know there are apps that are specialized for just such situations. So listen up, InstaNostradamuses…Instagrostra…Instadam…Insta…uh…you guys (we’ll workshop it. No we won’t. We’ll probably just abandon that effort completely. You’re welcome) — these are the Instagram-post-scheduling apps for you.
While all of the iPhone apps below are free to download, they all have some in-app purchases.
We’ll start with “official partner” of Instagram, itself, Planoly — an Instaplanner that uses a grid to let you plan, schedule, and publish posts (as well as Reels) on Instagram. The app also lets you see post metrics and analytics so you can make sure your post didn’t flop.
Credit: buffer / app store
Buffer is another Instagram post scheduler that helps you plan your posts and analyze feedback once they’re published. Use a calendar view to drag and drop posts into days/time slots for easy scheduling.
Credit: preview / app store
Preview offers typical post-scheduling tools and analytics along with a few helpful extras. Get caption ideas, recommendations for hashtags, and more.
Credit: content office / app store
An Instagram post scheduler with a visual boost, Content Office allows users to plan and schedule Instagram posts while learning “marketing and visual guides to grow your brand on Instagram.” Like aesthetics and using visuals to create cohesive themes? Maybe this is the Instaplanner for you.
Content Office is available for iOS on the Apple App Store.
Credit: plann / apple store
You’ll never guess what “Plann” lets you do…
Aside from scheduling posts, get content ideas and recommendations, as well as strategy tips to ensure you’re maximizing your Instagram engagement. Ever wonder when the best time to post something is? Plann can offer you some help with that.
Social networking websites launch features to encourage users to get boosters
From Friday, users will be able to update their profiles with frames or stickers to show that they have had their top-up jab or aim to when they become eligible.
It follows on from people previously being able to show they have had their first and second jabs on certain social networking websites and apps.
TikTok also held a “grab a jab” event in London earlier this year.
I urge everyone who is eligible – don’t delay, get your vaccine or top up jab today to protect yourself and your loved ones
More than 16 million booster vaccines have now been given across the UK.
People who are aged 40 and above and received their second dose of their vaccine at least six months ago are currently eligible to have their booster.
A new campaign advert is also being launched on Friday, which shows how Covid-19 can build up in enclosed spaces and how to prevent that from happening.
Vaccines minister Maggie Throup said: “Getting your booster is one of the most important things you can do to protect yourself and your family this winter.
“It is fantastic to see some of the biggest household names further back the phenomenal vaccine rollout, allowing their users to proudly display that they have played their part in helping us build a wall of defence across the country.
“I urge everyone who is eligible – don’t delay, get your vaccine or top-up jab today to protect yourself and your loved ones.”