Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×
User Journal

Journal Security Note On Slashdot's "Social Login" Feature 8

If you use Slashdot's social login feature (which lets you log into Slashdot by means of an external account, such as one at Facebook or LinkedIn), you've probably noticed that this feature has recently been disabled. We've taken this step because of an exploitable bug in such systems (reported here and here, for instance) which could have let a malicious user log into a Slashdot account to which they should not have access. (To exploit this, an attacker would also have needed to know the email account used to sign up for a Slashdot username as well as create an account claiming that email address on an exploitable third-party social network; we have no reason to think that any reader's account was maliciously exploited.) If you use the social login feature, we apologize for the inconvenience. If you have reason to think that your account has been compromised, please let us know by emailing help@slashdot.org.

This discussion has been archived. No new comments can be posted.

Security Note On Slashdot's "Social Login" Feature

Comments Filter:

Happiness is twin floppies.

Working...