I would say so, the URLs are pretty darn long: https://scontent-arn2-2.cdninstagram.com/vp/5932ec6f480e416adb482afdbfebe189/5E47AF82/t51.2885-15/e35/74665255_2

I would say so, the URLs are pretty darn long: https://scontent-arn2-2.cdninstagram.com/vp/5932ec6f480e416adb482afdbfebe189/5E47AF82/t51.2885-15/e35/74665255_2283263248631663_6646495081169154079_n.jpg?_nc_ht=scontent-arn2-2.cdninstagram.com&_nc_cat=111 https://scontent-arn2-2.cdninstagram.com/vp/5932ec6f480e416a... It's not obvious how likely it is to guess a valid URL, but even if it's just the first path, its still 128 bits (assuming a hexadecimal alphabet). According to [0] there are 50+ billion photos uploaded to Instagram. Even if we assume 10 000 billion posts (200x margin), 10^13 is a very small number in comparison to 2^128≈3.4*10^38, [0]: https://www.omnicoreagency.com/instagram-statistics/ https://www.omnicoreagency.com/instagram-statistics/ (In the the URL above I've changed one character, yielding it invalid, leaving it as an exercise for the reader to figure the missing one out.)