All your Facebook Access Tokens are belong to us

Re:All your Facebook Access Tokens are belong to us by patmcguire on Tuesday October 29, 2013 @11:41AM (#6634935)

Can anyone get to the article?

[ Parent | on HN ]

Re:All your Facebook Access Tokens are belong to us by mikeevans on Tuesday October 29, 2013 @11:55AM (#6635060)

Overview which links to the original post can be found here: http://threatpost.com/facebook-android-flaws-enable-any-app-...

[ Parent | on HN ]

Re:All your Facebook Access Tokens are belong to us by jt2190 on Tuesday October 29, 2013 @12:36PM (#6635479)

Is this it?

http://webcache.googleusercontent.com/search?q=cache:F0k-GBb...

[ Parent | on HN ]

Re:All your Facebook Access Tokens are belong to us by thefreeman on Tuesday October 29, 2013 @12:01PM (#6635123)

worked for me. tldr: Facebook apps were leaking the access token via the android log cat which is accessible from any app installed on your device.

[ Parent | on HN ]

Re:All your Facebook Access Tokens are belong to us by JosephRedfern on Tuesday October 29, 2013 @12:19PM (#6635295)

AFAIK since Android 4.1 the READ_LOGS permission (needed for an app to be able to access logcat output) can no longer be granted to a 3rd party application... of course, there are going to be lots of devices out there running Android < 4.1.

[ Parent | on HN ]

Re:All your Facebook Access Tokens are belong to us by CaveTech on Tuesday October 29, 2013 @12:04PM (#6635148)

AFAIK this has been a problem for well over 2 years now.

[ Parent | on HN ]

Re:All your Facebook Access Tokens are belong to us by hfreire on Tuesday October 29, 2013 @11:44AM (#6634963)

Nope.

[ Parent | on HN ]