techwebies.com
Facebook login bug lets attackers hijack accounts on Mashable, other sites - Techwebies
A bug in Facebook login that a Sakurity.com blogsaid the social network has failed to fix after a year allows attackers to compromise accounts on websites that leverage Facebook Login, notably, Bit.ly, About.me, Stumbleupon, Angel.co, Mashable.com, Vimeo and others. The post, penned by Egor Homakov, noted that “this bug abuses triple-CSRFs at once: CSRF on …