Not secure at all

Hi okapulsen,

I’m sorry to hear that happened to you, but I can assure you it is unrelated to using our plugin. What you are describing would not even be possible by our plugin and so I can assure you that the timing is coincidental, and that this didn’t happen as a direct result of using our plugin. We take security very seriously, and our plugin has been through multiple security reviews and even had a manual security penetration test by an independent firm.

Please be careful when making definitive statements like this as it questions the integrity of our products, which we take pride in ensuring are as secure as possible.

Many thanks!

John

I described what happened in an objective way. Since you do not want to take action and follow up on what happened, only threaten that I make serious accusations against you shows more about you and how you look at your users. Is that the way you run your buisness?
Let your user judge if your product is safe or not to use.

1. Discovered weird activity on my account, a post about cryptocurrency was published and hundreds of new followers are starting to appear in the feed. Checked the login statistics for my Instagram account and I was the only one who has logged in and not any login at the time the activity started.

2. I changed the password on my Instagram account (50 random characters) but still hundreds of new followers appeared.

3. Removed the connection for the plugin and then it completely stopped appearing new followers and no weird activity.

Hi @okapulsen,

I understand your frustration and am sincerely sorry that you experienced this situation with your Instagram account. I apologize if it felt like I didn’t follow up to help, that wasn’t because we wouldn’t like to help, it’s that the issue you’re describing is outside of our control as it relates to your Instagram account itself.

Instagram has strict requirements on the ability for apps to be able to publish to your Instagram account. If you refer to the Instagram documentation here, in the “Requirements” section you’ll see that in order to publish content it requires the “instagram_content_publish” permission. Our app does not have this permission and so it’s not possible for it to be used to publish to your Instagram account.

When you authorize our plugin, you are redirected to Instagram/Facebook where it lists all permissions which you are granting the app. None of these permissions allow access to post to your Instagram account or perform the actions you described. There’s not a way for our app to be used to post content or add followers to an account.

Our plugin has been through many ongoing reviews by the Instagram team itself and by independent security researchers to ensure the highest level of security, and we take security extremely seriously.

I’m really sorry that you had this issue and if there’s anything we can do to help then please just let me know.

John