Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
Check out the new SourceForge HTML5 internet speed test! No Flash necessary and runs on all devices. ×
Facebook

Submission + - OAuth Flaw Allowed Access to Any Facebook Account (net-security.org)

Orome1 writes: "A flaw in Facebook's OAuth system that allows the communication between applications and users has allowed web application security specialist Nir Goldshlager to gain full control of any Facebook account. The exploit worked on all browsers, and would even work on accounts that have 2-step verification enabled. Luckily for all of us, this flaw has already been patched by Facebook, but Goldshlager says that he found a couple of more and Facebook is still working on fixing them."
This discussion was created for logged-in users only, but now has been archived. No new comments can be posted.

OAuth Flaw Allowed Access to Any Facebook Account

Comments Filter:

Veni, Vidi, VISA: I came, I saw, I did a little shopping.

Working...