Instagram notified some users of a new security flaw that could have inadvertently exposed their passwords to public view, raising questions among security researchers about the effectiveness of Instagram’s security measures.
The security flaw was tied, ironically, to a tool Instagram introduced in April to let users see how much of their personal data the site had collected. “Download Your Data” lets users download all the data that Instagram has on them, both to comply with new European data-privacy regulations and to satisfy increasingly privacy-sensitive users around the world.