2 replies to this topic

[GreatMarkO]

From BBC News:
"Facebook has moved quickly to shut down a loophole which made some accounts accessible without a password.
The bug was exposed in a message posted to the Hacker News website.
The message contained a search string that, when used on Google, returned a list of links to 1.32 million Facebook accounts.
In some cases clicking on a link logged in to that account without the need for a password. All the links exposed the email addresses of Facebook users."

Source: http://www.bbc.co.uk...nology-20180229

Before anyone panics, FB say they have fixed the flaw "turned the feature off until we can better ensure its security"

[Growled]

I hope they've gotten it fixed.

[Ambroos]

I never was a big fan of those links that automatically log you in to a website. It's really weird when you're suddenly logged in on a new computer or browser. Just let people enter their passwords.