facebook Facebook flaw bypasses password protections

[GreatMarkO]

From BBC News:

"Facebook has moved quickly to shut down a loophole which made some accounts accessible without a password.

The bug was exposed in a message posted to the Hacker News website.

The message contained a search string that, when used on Google, returned a list of links to 1.32 million Facebook accounts.

In some cases clicking on a link logged in to that account without the need for a password. All the links exposed the email addresses of Facebook users."

Source: http://www.bbc.co.uk/news/technology-20180229

Before anyone panics, FB say they have fixed the flaw "turned the feature off until we can better ensure its security"

[Growled Member]

I hope they've gotten it fixed.

[Ambroos]

I never was a big fan of those links that automatically log you in to a website. It's really weird when you're suddenly logged in on a new computer or browser. Just let people enter their passwords.