Live data from Hacker News

Ask HN: How does my Instagram keep getting compromised?

news.ycombinator.com

41–50 of 118 posts

Re: Ask HN: How does my Instagram keep getting compromised?

#41
post #35

Someone at Facebook stealing your domain is quite an accusation. Assuming your domain was similar to your username/IG handle, wouldn't it be more likely to be people wanting your "china" domain for spam/malware/propaganda/etc?

Publicly pondering a theory is an accusation now?

It read to me like that, yes.

Re: Ask HN: How does my Instagram keep getting compromised?

#42

Earlier quoted context omitted.

Reply All also did an episode about this a few years back. https://gimletmedia.com/shows/reply-all/v4he6k tl;dr There's underground marketplaces where shady people buy and sell OG usernames for money, which creates an incentive for shady people to steal them from the original owners.

Perhaps incentives don't line up... but I'm wondering if social media sites like IG should make renting out usernames a thing - obviously there's a market for it. If I'm taking social media hiatus, for example, I wouldn't mind getting paid while away.

Sooooo how does that work? I rent your username while you’re on holiday for a month and then spam your followers with crypto scams and viagra ads?

Or they decouple followers from the username so the username becomes a transient thing, which then gets ignored, and becomes worthless?

Re: Ask HN: How does my Instagram keep getting compromised?

#43
post #9

Your situation is apparently common nowadays with OG usernames and can get very dangerous. I had no idea this was a thing until I listened to an episode on Darknet Diaries [0] recently. In the old days, I remember people going after short domains in the same manner. ICANN ended up adding locking (auth codes) - perhaps IG and other social sites can learn from it. Be safe! [0] https://darknetdiaries.com/episode/106/

I'm not up-to-date with what OG means. Apparently OG "original gangster" usernames refer to common words such as "@Miracle", that were registered by early adopters. https://www.nytimes.com/2021/02/04/style/instagram-account-f...

Or that guy @slack on Twitter. Or @gusto on same

Re: Ask HN: How does my Instagram keep getting compromised?

#44

Someone at Facebook stealing your domain is quite an accusation. Assuming your domain was similar to your username/IG handle, wouldn't it be more likely to be people wanting your "china" domain for spam/malware/propaganda/etc?

> Someone at Facebook stealing your domain is quite an accusation. NSA employees do it, why would META employees would be better than the average?

I wouldn't count a NSA employee as "average", I'd assume they have access to tools the "average" doesn't have. Comparing that to someone at Facebook just doesn't make sense.

Re: Ask HN: How does my Instagram keep getting compromised?

#45
post #9

Your situation is apparently common nowadays with OG usernames and can get very dangerous. I had no idea this was a thing until I listened to an episode on Darknet Diaries [0] recently. In the old days, I remember people going after short domains in the same manner. ICANN ended up adding locking (auth codes) - perhaps IG and other social sites can learn from it. Be safe! [0] https://darknetdiaries.com/episode/106/

I'm not up-to-date with what OG means. Apparently OG "original gangster" usernames refer to common words such as "@Miracle", that were registered by early adopters. https://www.nytimes.com/2021/02/04/style/instagram-account-f...

Yes indeed - I thought everyone knew that /s :)

You’ll be amazed how much googling I do when having conversations with friends - I wasn’t born in the West and things like movie references leave me confused af! But I hide it… thank goodness for urban dictionary

Re: Ask HN: How does my Instagram keep getting compromised?

#46
post #9

Your situation is apparently common nowadays with OG usernames and can get very dangerous. I had no idea this was a thing until I listened to an episode on Darknet Diaries [0] recently. In the old days, I remember people going after short domains in the same manner. ICANN ended up adding locking (auth codes) - perhaps IG and other social sites can learn from it. Be safe! [0] https://darknetdiaries.com/episode/106/

I'm not up-to-date with what OG means. Apparently OG "original gangster" usernames refer to common words such as "@Miracle", that were registered by early adopters. https://www.nytimes.com/2021/02/04/style/instagram-account-f...

OG is the old gang of people, the original early founders/adopters/users.

Re: Ask HN: How does my Instagram keep getting compromised?

#47
post #3

> My current theory is there is some employee at Meta that's ultimately stealing the account This happens all the time, there is no recourse. Instagram employees are constantly taking usernames for themselves.

Not just themselves, often it's stolen to order: there's been a few mainstream stories about this and they often mention that paying off Facebook employees is pretty commonplace because the value of these usernames and the low paid customer service representatives are a recipe for bribery.

Re: Ask HN: How does my Instagram keep getting compromised?

#48
post #42

Earlier quoted context omitted.

Perhaps incentives don't line up... but I'm wondering if social media sites like IG should make renting out usernames a thing - obviously there's a market for it. If I'm taking social media hiatus, for example, I wouldn't mind getting paid while away.

Sooooo how does that work? I rent your username while you’re on holiday for a month and then spam your followers with crypto scams and viagra ads? Or they decouple followers from the username so the username becomes a transient thing, which then gets ignored, and becomes worthless?

I prefaced it with perhaps incentives don’t necessarily line up… maybe there’s a clever way to go about it. I was thinking it will be pre-approved category of content… there’s already such model with sponsored content influencers post.

Re: Ask HN: How does my Instagram keep getting compromised?

#49
post #42

Earlier quoted context omitted.

Perhaps incentives don't line up... but I'm wondering if social media sites like IG should make renting out usernames a thing - obviously there's a market for it. If I'm taking social media hiatus, for example, I wouldn't mind getting paid while away.

Sooooo how does that work? I rent your username while you’re on holiday for a month and then spam your followers with crypto scams and viagra ads? Or they decouple followers from the username so the username becomes a transient thing, which then gets ignored, and becomes worthless?

That is basically how domains work, but there are grace periods for recovery.

Re: Ask HN: How does my Instagram keep getting compromised?

#50
I had a two letter name which got hacked. I called in a favor from a friend of a friend at instagram/FB and got it back.. then it happened again and I didn't want to ask the favor again. IIRC they did not yet have 2FA even though I asked for it ( I was assuming it would happen again and it did. )
Post reply on HN