4 ms·
It seems odd that the Facebook authentication token would allow that kind of access - admin on the business pages - by default. Were you asked for particular pe
by fabbari 6y ago
It seems odd that the Facebook authentication token would allow that kind of access - admin on the business pages - by default. Were you asked for particular permissions? Or did they fake the Facebook login completely?
- jlund-molfese 6y agoI'm assuming the app impersonated a real login with Facebook prompt. When I use a real Facebook login in another app, it tells me which permission I want to grant to another site, and lets me edit them. But I wouldn't think twice if I was asked to enter my credentials (which happens if you don't have the Facebook app installed) and didn't receive that permissions prompt.
- NiekvdMaas 6y agoIt's actually the real login page of Facebook in a webview. I have 2FA on all my accounts including FB, so it looked very legit. Once you have logged in, they seem to grep the token and close the webview.