Skip to content

Josip Franjković personal blog

Stealing Facebook access_tokens using CSRF in device login flow

josipfranjkovic.com

I enjoy breaking websites.

Read on josipfranjkovic.com → Discuss on HN (82) Archived copy

Points: 127
HN comments: 82
Submissions: 1
Cited by: 0 commenters

Security & Privacy 2016

On Hacker News

Submitted	Title on HN	Points	Comments
Jul 19, 2016	Stealing Facebook access_tokens using CSRF in device login flow by franjkovic	127	82

More from Josip Franjković

All 3 posts →

Getting any Facebook user's friend list and partial payment card details

2018416 points91 comments Security & Privacy details

Race conditions on the web

2016119 points27 comments Security & Privacy details

Related posts from the same era

Announcing the first SHA-1 collision

Google Security Blog20173,030 points485 commentscited by 13 details

Accidentally Stopping a Global Cyber Attack

MalwareTech20171,981 points338 commentscited by 8 details

Instagram's Million Dollar Bug

EXFiLTRATED20151,562 points520 commentscited by 6 details

What Happens When You Send a Zero-Day to a Bank?

Privacy Log20171,494 points438 comments details

Amazon's customer service backdoor

Medium20161,447 points356 commentscited by 5 details

Keybase launches encrypted Git

Keybase Blog20171,427 points270 commentscited by 14 details