Hacker News new | past | comments | ask | show | jobs | submit login
Attempting to disclose a social engineering vulnerability to Instagram
3 points by omfg on Sept 18, 2016 | hide | past | favorite | 2 comments
I've been trying to disclose a vulnerability in Instagram's support process that is being widely abused (social engineering). Unfortunately I can't get their support or press team to respond. FB White Hat disclosure did respond but can't do anything unless it's a technical exploit. They have flaws in their account recovery mechanism.

It's a long shot and perhaps the wrong place to ask. But. Does anyone know someone at IG I can contact to disclose this issue responsibly?

Thank you.




Could you try to contact some people on linkedin?


I did try reaching out to some employees on LinkedIn. While I saw some profile views none actually replied back. I'm sure there has to be a team at Instagram who handles this stuff but finding / contacting them has been incredibly difficult. Starting to run out of ideas and the exploit is still active.




Consider applying for YC's Spring batch! Applications are open till Feb 11.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: