Statement from the person who found, threatened to use, and eventually reported the bug https://www.facebook.com/robots.tx/posts/1198980273583188 …
-
-
-
Has anyone validated this? The Google translation of that post is pretty awful. Thanks.
-
Chi Yuan Chang is known in bug bounty circles, and his facebook is linked directly from
@LINEjp_official website for Security Contributorshttps://bugbounty.linecorp.com/en/halloffame/2016/ …
End of conversation
New conversation -
-
-
Does a compromise of one of these access tokens also grant access to any 3rd party accounts using "Login with Facebook"? (I *really* hope not...!)
-
it's a key question. checking.
- 1 more reply
New conversation -
-
-
Could those tokens then be used to log into other service providers that use Facebook as an identity provider?
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Why do their session tokens last so long?
-
to keep users online as long as possible - nothing to do with security, of course
End of conversation
New conversation -
-
-
I cannot imagine what would have happened if they didn't take things "incredibly seriously"...
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Ooh-auth anybody
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
*stares at camera* ... Nice.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
I'm glad they're taking this "incredibly seriously". ;)
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Does anyone know if this was related to their app webhooks?
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Or, Facebook customer didn’t pay.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Seems that the best part of Facebook is getting *hacked*.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Yeah, im deleting that account now.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.