> Doesn't the author know how long it will take them to recover from this breech? I assume Facebook would need to regenerate API keys anyways. Simply showing t

> Doesn't the author know how long it will take them to recover from this breech? I assume Facebook would need to regenerate API keys anyways. Simply showing that author could have accessed the API keys is reason enough to think that he may have even if he claims to not have, or that someone else may have access the API keys.