Security researcher discovers absurd Instagram account takeover flaw

A researcher found a critical vulnerability in Instagram's account recovery flow that allowed takeovers through a laughably simple method. The flaw highlights how even major platforms can ship embarrassingly basic security oversights—a reminder that indie makers should stress-test their own auth flows before shipping.