Facebook is an online social networking service founded in February 2004 by Mark Zuckerberg.

learn more… | top users | synonyms

0
votes
0answers
21 views

Facebook Login security concern with the javascritp JDK [duplicate]

Possible Duplicate: Isn’t OAuth, OpenID, Facebook Connect, and others crazy from a security standpoint? I have some real concerns about how to use facebook login for my wabb-app. I have a ...
3
votes
3answers
638 views

Access Control and Authentication using Facebook access tokens in a webapp

I'm working on a mobile app with a web backend. We'd like to have users authenticate (log in) themselves through Facebook only, so we don't have to store passwords etc. and don't force users to create ...
7
votes
1answer
2k views

Storing OAuth and other authentication tokens

We all know that when to store passwords, we should store it with one-way hash such as a variant of SHA, bcrypt or scrypt to prevent plain-text password leaks when the database is hacked. But what ...
2
votes
1answer
459 views

Why is a link posted to Facebook going through all redirects and showing info for final page only?

Today I read a post on a Facebook-group about a "problem" with links posted to Facebook. Appearently when you post a link at Facebook, the sites goes through the redirect(s) that may be on the site ...
2
votes
3answers
482 views

Will this work? Revealing identity (facebook) of person who clicks specially crafted link

There is a special Facebook link that will redirect anyone who clicks it to their own Facebook profile they are currently logged in on on their browser. The link goes like this: ...
12
votes
2answers
6k views

Facebook API : App Secret - possible misuse

I've recently find out that by simple quick look into compiled code of one of our applications, you can get both App ID (API Key) and App Secret for Facebook API I suppose that we should really keep ...