I wonder if this could be used as an DoS attack vector. Flood users with bot messages with dynamic links to huge files.
(Instagram is the reflection attacker, not the target.)
[Add.: sure you could try to attack Instagram/FB with this, but to execute it you kinda need to trump FB's bandwidth which is gonna turn it into a DoS on your own bank account.]
Also looks like this multiplies the download. I wonder if they cache it somehow so if the url is requested more than once it doesn’t pull it again.
I wonder how much bandwidth one could consume with a bot account.
Presumably if I message 100 urls they will all be pulled.
The idea of an infinitely sized file is interesting.