Egor Homakov personal blog
Two "WontFix" vulnerabilities in Facebook Connect
TL;DR Every website with "Connect Facebook account and log in with it" is vulnerable to account hijacking. Every website relying on signed_r...
- Points
- 188
- HN comments
- 35
- Submissions
- 1
- Cited by
- 0 commenters
Security & PrivacyWeb & Frontend2014
On Hacker News
| Submitted | Title on HN | Points | Comments |
|---|---|---|---|
| Jan 27, 2014 | Two "WontFix" vulnerabilities in Facebook Connect by homakov | 188 | 35 |