News for hackers. Stuff that matters.

A comment on How To Cheat On Facebook Apps Permissions. Parent comment

Re:How To Cheat On Facebook Apps Permissions by homakov on Wednesday August 29, 2012 @08:16AM (#4448116)
this has nothing to do with CSRF btw. And this is not flaw of FB - this is a core flaw of OAuth2. Lots of them though:

http://homakov.blogspot.com/2012/07/saferweb-most-common-oau...

http://homakov.blogspot.com/2012/08/oauth2-one-accesstoken-t...

[ Parent | on HN ]

There are no comments on this comment yet.