Instagram Bug : $$$$ Mention Bypass | Facebook Bug Bounty

I was testing with the Instagram Lite App. There is major difference in the APIs of the Instagram APp and the Lite App.  

Bugs were found by other bug hunters in the Facebook and its Lite Version. So I gave a try to the Insta.

I was mainly concerned about the privacy of other users, like invading into their privacy and something I enjoy doing. We also love invading into other people private life right? Like who they dated and also love to read their personal messages.

In the Instagram App

There is Mentions in the Privacy settings of Instagram that have options like:

No One.

Only followers etc.

When the User has set the mentions to No one then any user cannot tag them in the comments of other posts across Insta.

But in the Instagram Lite app, You can directly enter the user name of the user and just post the comment. I tags that account.



Rewarded $500 , 25 days later since reporting the bug

Comments

  1. Hello; it is still reproducible; I've got a bypass. Can we contact?

    ReplyDelete

Post a Comment