A developer in London discovered that an Instagram account can be easily hijacked and released to the public a proof-of concept of the method, after Facebook denied him a bug bounty, saying that they were aware of the problem he described to them.Because of Instagram’s insecure communication, Stevie Graham was able to intercept traffic from the Instagram app for iOS and retrieve the session cookies, which allowed him to hijack the account for the service.The flaw is not new and consists in the…
Comments are closed.
