Skype, Dropbox Patch Critical Facebook Authentication Bugs

UPDATE Popular applications Skype and Dropbox fixed holes in their websites this week that could have allowed an attacker to gain control of users’ Facebook accounts. In what’s technically being referred to as an “open direct vulnerability,” both applications failed to validate sites before sendi...

URL Redirection flaw in Facebook apps push OAuth vulnerability again in action

In earlier posts, our Facebook hacker 'Nir Goldshlager' exposed two serious Facebook oAuth Flaws. One, Hacking a Facebook account even without the user installing an application on their account and second, various ways to bypassing the regex protection in Facebook OAuth. This time, Nir illustrat...

Уязвимость серверов mail.com

Слабая схема генерации маркетра доступа позволяет подменить маркер доступа получив доступ к почте и настройками другого пользователя на любых почтовых серверах использующих П/О от mail.com...