stilkov’s avatarstilkov’s Twitter Archive—№ 5,174

  1. RT nzkoz: So it turns out that Facebook's CSRF tokens can be trivially stolen, that's how the worms work. john-jean.com/blog/advisories/facebook-csrf-and-xss-vulnerabilities-destructive-worms-on-a-social-network-350