Hacking Facebook's Legacy API, Part 1: Making Calls on Behalf of ...

July 8th, 2014. Summary. A misconfigured endpoint allowed legacy REST API calls to be made on behalf of any Facebook user using only their user ID, which ...

Lee mas