The attack worked by exploiting two separate vulnerabilities: one in Tinder and another in Facebook's Account Kit system, which Tinder uses to manage logins. The Account Kit vulnerability exposed users' access tokens (also called an “aks” token), making them accessible through a simple API request ...
from Google Alert - vulnerability http://ift.tt/2CCfGkg
via IFTTT
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment