Live data from Hacker News

Attempting to disclose a social engineering vulnerability to Instagram

news.ycombinator.com

1–3 of 3 posts

Attempting to disclose a social engineering vulnerability to Instagram

#1
I've been trying to disclose a vulnerability in Instagram's support process that is being widely abused (social engineering). Unfortunately I can't get their support or press team to respond. FB White Hat disclosure did respond but can't do anything unless it's a technical exploit. They have flaws in their account recovery mechanism.

It's a long shot and perhaps the wrong place to ask. But. Does anyone know someone at IG I can contact to disclose this issue responsibly?

Thank you.

Re: Attempting to disclose a social engineering vulnerability to Instagram

#3

Could you try to contact some people on linkedin?

I did try reaching out to some employees on LinkedIn. While I saw some profile views none actually replied back. I'm sure there has to be a team at Instagram who handles this stuff but finding / contacting them has been incredibly difficult. Starting to run out of ideas and the exploit is still active.