Friday, February 6, 2015

Anybody can look at your Instagram

Geek version: I just think everybody should know that Instagram uses unencrypted connections. So not only it's very easy to sniff the traffic it sends or receives from a REST JSON web service, but also that the links to the pictures in the JSON messages are publicly accessible for anyone with the right link...

Non-geek version: Anybody can look at your Instagram pictures, what's in your inbox, what you send and what you receive, especially if you use a company / school / shared WiFi network. Use a mobile connection or avoid using Instagram altogether.
Instagram automatically downloads data without your knowledge, so even if the app is not opened, people can look at your data.

Also, never use a password on more than one website (use a password manager instead) and use a code on your phone.

No comments:

Post a Comment