Slashdot is powered by your submissions, so send in your scoop

 



Forgot your password?
typodupeerror
Note: You can take 10% off all Slashdot Deals with coupon code "slashdot10off." ×
Facebook

Submission + - OAuth Flaw Allowed Access to Any Facebook Account->

Orome1 writes: "A flaw in Facebook's OAuth system that allows the communication between applications and users has allowed web application security specialist Nir Goldshlager to gain full control of any Facebook account. The exploit worked on all browsers, and would even work on accounts that have 2-step verification enabled. Luckily for all of us, this flaw has already been patched by Facebook, but Goldshlager says that he found a couple of more and Facebook is still working on fixing them."
Link to Original Source
This discussion was created for logged-in users only, but now has been archived. No new comments can be posted.

OAuth Flaw Allowed Access to Any Facebook Account

Comments Filter:

Top Ten Things Overheard At The ANSI C Draft Committee Meetings: (4) How many times do we have to tell you, "No prior art!"

Working...