From pandasecurity.com
Instagram users are being warned of a security loophole that could be used to expose their private posts. This means that private posts and messages could be shared with almost anyone – not just trusted friends.
Perhaps more worrying is the fact that there are no special tools required to accessing secret posts.
It’s all about addresses
Every single webpage on the internet has an address – that’s how our web browsers know where to find them. Some addresses like pandasecurity.com are well-publicised – we want people to find them easily.
Your private Instagram posts also have an address – it’s just not immediately visible. But it can be found very, very easily.
Most web browsers (Chrome, Safari, Firefox, Edge) include basic development tools that allow you to view the code which define how the page looks. And by viewing the page source code, you can quickly and easily find the address of ‘private’ posts and images.