logoalt Hacker News

HelloUsernameyesterday at 3:53 PM3 repliesview on HN

Source posted on 9-jan: https://news.ycombinator.com/item?id=46571968

Instagram response posted on 11-jan: "We fixed an issue that let an external party request password reset emails for some people. There was no breach of our systems and your Instagram accounts are secure. You can ignore those emails — sorry for any confusion" https://xcancel.com/instagram/status/2010202301886238822?s=2...


Replies

chneuyesterday at 4:10 PM

I get email reset passwords from IG at least once a month.

I doubt they fixed anything. Lol

show 7 replies
gruezyesterday at 4:14 PM

>Source posted on 9-jan: https://news.ycombinator.com/item?id=46571968

Yeah the source is terrible. I'd expect at least some sort of explanation on how they arrived at that conclusion, eg. "someone on breachforums claims to have it for sale" or "some whistleblower at instagram reported". If it's the former, it's possible that instagram themselves aren't at fault, eg. they got it via phishing or credential stuffing.

malsheyesterday at 5:52 PM

I received a password reset request email just yesterday. Not sure what they fixed.

show 1 reply