Conversation:
Notices
-
Former Bob Jonkman -- Please use the new server at https://gs.jonkman.ca (bobjonkmanformer)'s status on Wednesday, 29-Jan-2014 02:29:12 EST Former Bob Jonkman -- Please use the new server at https://gs.jonkman.ca "[Facebook] user information could be up for grabs, as well as the potential to allow attackers to control services linked to !Facebook via its Connect feature." http://www.zdnet.com/facebook-connect-flaws-cant-or-wont-be-fixed-researcher-7000025698/ !security -
Former Bob Jonkman -- Please use the new server at https://gs.jonkman.ca (bobjonkmanformer)'s status on Wednesday, 29-Jan-2014 02:34:39 EST Former Bob Jonkman -- Please use the new server at https://gs.jonkman.ca !Facebook: "Enforcing login CSRF protection is something that has been a non-starter here for a number of years, as every attempt to enable it has broken a huge number of extensions, integrations, and other shenanigans." In other words, those extensions and integrations rely on known !security vulnerabilities to work.
-