News for hackers. Stuff that matters.
Re:Getting any Facebook user's friend list and partial payme... by mkagenius on Friday March 09, 2018 @06:32PM (#16556035)
> If the parameter is invalid, return nothing, rather than return all the credit cards

I don’t think that’s the bug here, bug here is the authorization check not being there.

That parameter is trivial to obtain using other ways even now.

There are no comments on this comment yet.