Instagram Founder's Instagram Locked When One Person Convinced Instagram He Had Died

from the i-feel-happyyyyy dept

We have talked a long, long time about how the concept of content moderation at the kind of scale of the largest internet and social media platforms is essentially impossible. But it’s not just content moderation that is proving difficult for those platforms. Policing those platforms for anything that relies on user-based input is difficult as well. For instance, Instagram recently found out that its process for locking up the accounts of the deceased may need some work, as one person was able to get Instagram founder Adam Mosseri’s Instagram account locked.

Mosseri’s Instagram account was locked because of Instagram’s memorialization feature, where users can report to the company that an Instagram account holder has died. In response, Instagram will block anyone from logging into the account, and stop the ability to make any changes to already uploaded content.

“I find it ridiculous how Instagram lets such things even happen on their platform in the first place,” the scammer who claimed responsibility for the lock on Mosseri’s account, and who used the handle Syenrai, told Motherboard in an online chat. “The entire banning community needs to be discovered and reported to Instagram so they can put an end to this—it’s basically the dark side of Instagram.”

So, what is that memorialization feature? Well, an email goes into Instagram’s team to trigger the account change. Instagram then requests proof that the person in question is now deceased. That admittedly morbid request takes the form of a request for either a death certificate or obituary. While that seems reasonable, it should be obvious where the flaw in this system is.

“I have a method which is as simple as finding an online obituary of a person who recently passed away,” they explained. “I then submit a memorialize request for the victim’s account using the random obituary I found, and it takes 1-2 days for support to process.”

“As long as the obituary is recent (within same week) the target will be memorialized,” Syenrai said. “It works 98% of the time.”

While, sure, it’s fairly funny to see Instagram lock up and memorialize the account for its own boss, who is very much alive, this all becomes less funny when you understand how this goes for the average, every day user of Instagram. It’s also worth noting that this is one of many vulnerabilities that nefarious actors use to harass targets on Instagram.

As for the memorialization process specifically, Instagram’s comments have all been canned-style responses indicating that big platforms occasionally have tools like this abused and that Instagram has hires “investigators and cybersecurity specialists” to keep nefarious actors at bay. But it’s obviously not working. That Mosseri’s account was locked down pretty much proves that.

If the head of Instagram can fall victim to this, what hope is there for the rest of Instagram’s usership?

Filed Under: , ,
Companies: instagram

Rate this comment as insightful
Rate this comment as funny
You have rated this comment as insightful
You have rated this comment as funny
Flag this comment as abusive/trolling/spam
You have flagged this comment
The first word has already been claimed
The last word has already been claimed
Insightful Lightbulb icon Funny Laughing icon Abusive/trolling/spam Flag icon Insightful badge Lightbulb icon Funny badge Laughing icon Comments icon

Comments on “Instagram Founder's Instagram Locked When One Person Convinced Instagram He Had Died”

Subscribe: RSS Leave a comment
20 Comments
Anonymous Coward says:

“I find it ridiculous how Instagram lets such things even happen on their platform in the first place,” the scammer who claimed responsibility for the lock on Mosseri’s account, and who used the handle Syenrai, told Motherboard in an online chat. “The entire banning community needs to be discovered and reported to Instagram so they can put an end to this—it’s basically the dark side of Instagram.”

So, turn yourself in, and anyone else you know in the business, and knock it the fuck off?

Anonymous Coward says:

Re: Re:

What is this, security based on the honor system? "Knock it off" doesn’t close a vulnerability, facebook has to fix its broken moderation system and this guy is demonstrating why. You should not be able to lock someone else’s account just by claiming the owner is dead.
Even if this were exclusively used in cases where the owner actually is dead, with no malicious intent ever being applied (an incredibly naive if), this is a bad thing. Who says I want my account to be locked when I die? Maybe I want the people I leave behind to have access to it.

This comment has been deemed insightful by the community.
That Anonymous Coward (profile) says:

No one would EVER misuse this feature & making them submit documentation makes it impossible for them to fool us.

First thing we do is lock the account & block all access…
Because if someone tells us the person is dead, they would never attempt to login and tell us we were wrong or anything.
And we definitely shouldn’t reach out to the registered email with a note of condolence, which would make the average person respond with WTF are you talking about I’m alive you idiots.

Does silicon valley make people stupid?

That Anonymous Coward (profile) says:

Re: Re: Re:

I’m thinking its just a bright shiny example of those who believe they are smarter than everyone else.
No one would ever do this, so we need not think about it.
People are not malicious assholes, so we need not prepare.
Telling people we take their privacy seriously IS a valid defense plan.

I mean it is technically impossible to prepare for every possible vector but ROT13 isn’t actually encryption of customer data.

Anonymous Coward says:

Re: Re: Re: Re:

Easy to say, but hard to do, unless you want to have your anonymity online completely removed, as verification starts with identifying the user. The person dealing with your estate may not have accounts with the same social media services, or live in the same town, so a random email is a likely notification. Also, people frequently share names, and/or the name on the account may be different from the name on the death certificate.

Bobvious says:

The ironing is delicious

Considering that Facebook owns Instagram, "Instagram[a] is an American photo and video sharing social networking service founded by Kevin Systrom and Mike Krieger. In April 2012, Facebook Inc. acquired the service for approximately US$1 billion in cash and stock." https://en.wikipedia.org/wiki/Instagram, then this previous Techdirt article is so timely ………………

"In another move from the playbook, Facebook was rebranded as Meta. Since Meta means Dead in Hebrew (to the world’s amusement), I will refer to Facebook as Facebook for the time being.", https://www.techdirt.com/articles/20211118/16382947969/techlash-20-next-gen-techlash-is-bigger-stronger-faster.shtml

Add Your Comment

Your email address will not be published. Required fields are marked *

Have a Techdirt Account? Sign in now. Want one? Register here

Comment Options:

Make this the or (get credits or sign in to see balance) what's this?

What's this?

Techdirt community members with Techdirt Credits can spotlight a comment as either the "First Word" or "Last Word" on a particular comment thread. Credits can be purchased at the Techdirt Insider Shop »

Follow Techdirt

Techdirt Daily Newsletter

Ctrl-Alt-Speech

A weekly news podcast from
Mike Masnick & Ben Whitelaw

Subscribe now to Ctrl-Alt-Speech »
Techdirt Deals
Techdirt Insider Discord
The latest chatter on the Techdirt Insider Discord channel...
Loading...