4 ms·
Can anyone get to the article?
by patmcguire 13y ago
Can anyone get to the article?
- mikeevans 13y agoOverview which links to the original post can be found here: http://threatpost.com/facebook-android-flaws-enable-any-app-to-get-users-access-tokens/102724 http://threatpost.com/facebook-android-flaws-enable-any-app-...
- hfreire 13y agoNope.
- thefreeman 13y agoworked for me. tldr: Facebook apps were leaking the access token via the android log cat which is accessible from any app installed on your device.
- CaveTech 13y agoAFAIK this has been a problem for well over 2 years now.
- JosephRedfern 13y agoAFAIK since Android 4.1 the READ_LOGS permission (needed for an app to be able to access logcat output) can no longer be granted to a 3rd party application... of course, there are going to be lots of devices out there running Android < 4.1.
- jt2190 13y agoIs this it? http://webcache.googleusercontent.com/search?q=cache:F0k-GBbxbrgJ:attack-secure.com/2013/10/all-your-facebook-access-tokens-are-belong-to-us/+&cd=1&hl=en&ct=clnk&gl=us http://webcache.googleusercontent.com/search?q=cache:F0k-GBb...