Hacker News new | past | comments | ask | show | jobs | submit login

Any way to find out what sites you have used this on in the past?




Actually, with this vulnerability you wouldn't be able to check that page for the results of this attack because the attacker would have connected his Facebook account to your account at another website.

The attacker never linked your personal Facebook account to anything.


Yeah. Think about what sites you may have worked on in the past, then ask yourself, "Did I use Facebook Connect to handle authentication?" about each one.

BAM! You now know what sites you have used it on.


Snarky AND wrong, well done.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: