Instagram has fixed a privacy flaw that allowed anyone with the URL to see photos posted on the service, even if the user's account was set to private. At least, it has kind of fixed it.