3 ms·
To "escape" Facebook, in 2017, I tried to maintain a Messenger account with a phone number but without a Facebook account. By accident, I discovered that the Me
by jimmies 9y ago
To "escape" Facebook, in 2017, I tried to maintain a Messenger account with a phone number but without a Facebook account. By accident, I discovered that the Messenger-with-a-phone-number thingie that they have is just a Facebook account that doesn't allow you to log in "traditionally." But if you manage to get the auth token to log in, it allows you to play with a lot of stuff. It allows you to rate places, edit places, see people's profiles, register for events invisibly. It doesn't allow you to interact and post status updates, but it is still very much a Facebook account behind the scenes.
If it entertains you, I have a draft here for you to see my 6 months journey working with fb security on that "bug" (disclaimer: it wasn't very fun or exciting... basically, I didn't qualify for their bounty program. They only give out rewards to bugs that could be used to get other people's personal info.)
https://docs.google.com/document/d/e/2PACX-1vSa-LjM5IzyTWJuD1rDj6H9v0gBafi_cNZ7zQZkbpwDf6qIzXXv3jutgfLcDF6jpLfk7CaJKgtLGy5H/pub https://docs.google.com/document/d/e/2PACX-1vSa-LjM5IzyTWJuD...
Edit: I have updated the link to the doc with the proof of concept video removed because the names weren't blurred. Bad taste on my end, my apologies.