Facebook flaw allowed websites to steal users' personal data without consent

Student researchers Rui Wang and Zhou Li found a vulnerability which allowed malicious websites to access a Facebook user's private data without permission.

Would you want an unauthorised website to know your name, gender and date of birth?

Read more in my article at Naked Security.

Tags: , , , ,

Smashing Security podcast
Check out "Smashing Security", the new weekly audio podcast, with Graham Cluley, Carole Theriault, and special guests from the world of information security.

"Three people having fun in an industry often focused on bad news" • "It's brilliant!" • "The Top Gear of computer security"

Latest episode:

, , , ,

No comments yet.

Leave a Reply