News for hackers. Stuff that matters.

A comment on How To Cheat On Facebook Apps Permissions.

Re:How To Cheat On Facebook Apps Permissions by radagaisus on Wednesday August 29, 2012 @08:19AM (#4448127)
How is this a flaw? Go to your Facebook apps settings and you can disable extended permissions for any app there. The apps are expected to work with only some of the permissions, and they have APIs to check which permissions they have enabled. This is intended.

Edit: There's also an option to edit/disable the extended permissions during the authorization. Docs: https://developers.facebook.com/docs/opengraph/authenticatio... (Permissions section)

[ Parent | on HN ]
Re:How To Cheat On Facebook Apps Permissions by homakov on Wednesday August 29, 2012 @08:29AM (#4448156)
> This is intended

what is intended here? I am user and I cannot opt-out perms in user interface. So I have to use URL trick. Looks not intended

[ Parent | on HN ]
Re:How To Cheat On Facebook Apps Permissions by radagaisus on Wednesday August 29, 2012 @08:31AM (#4448158)
https://www.facebook.com/settings?tab=applications
[ Parent | on HN ]
Re:How To Cheat On Facebook Apps Permissions by mike-cardwell on Wednesday August 29, 2012 @08:38AM (#4448177)
During the time between granting the permissions, and removing them, couldn't those permissions be abused? The URL modification solution prevents this problem.
[ Parent | on HN ]
Re:How To Cheat On Facebook Apps Permissions by DeepDuh on Wednesday August 29, 2012 @08:51AM (#4448210)
Exactly what I thought. An app will potentially already have your whole social graph by the time you get to change those settings.
[ Parent | on HN ]
Re:How To Cheat On Facebook Apps Permissions by sp332 on Wednesday August 29, 2012 @08:58AM (#4448241)
The social graph is not secret. Apps don't need to ask any permission to get it. https://blog.facebook.com/blog.php?post=197943902130
[ Parent | on HN ]
Re:How To Cheat On Facebook Apps Permissions by sp332 on Wednesday August 29, 2012 @08:54AM (#4448226)
Yes, in fact some apps post to your timeline immediately with a message encouraging your friends to add the app.
[ Parent | on HN ]
Re:How To Cheat On Facebook Apps Permissions by homakov on Wednesday August 29, 2012 @08:36AM (#4448170)
thanks for the link

"This app can:" section with perms configuration is what I want to see on authorize URL.

[ Parent | on HN ]