# facebook com (blogs) — RSS Amplifier Recent posts from the 3 feeds in the RSS Amplifier directory that cover facebook com. Page: Feed: --- ## [South park proposals](https://prudhoe-conservatives.com/2026/08/05/south-park-proposals/) _2026-08-05 · prudhoeconservatives · Prudhoe Matters_ https://www.facebook.com/share/p/181htYB3XN/?mibextid=wwXIfr ## [Road closure Wylam](https://prudhoe-conservatives.com/2026/08/03/road-closure-wylam/) _2026-08-03 · prudhoeconservatives · Prudhoe Matters_ Station Road Wylam Northumberland County Council road closure for resurfacing and associated works. Expected road closure dates for phase 1 civils, Including drainage, replacing kerbs, vegetation clearance, verge works: 14/09/2026 – 16/09/2026 between the hours of 08:00 & 17:00. Expected road closure for phase 2 plaining out the road surface and resurfacing: 17/09/2026 – 20/09/2026between the… ## [RSPCA Shop closes](https://prudhoe-conservatives.com/2026/08/02/rspca-shop-closes/) _2026-08-02 · prudhoeconservatives · Prudhoe Matters_ County Councillor Gordon Stewart previously set out his concern about Government policies impacting upon Charities. CLICK HERE The permanent closure of the RSPCA charity shop on Front Street in Prudhoe is a real loss for the town. County Councillor Gordon Stewart noted, high street branches like this have long served as vital community facilities—not just … Continue reading "RSPCA Shop closes" ## [Moor road resurfacing](https://prudhoe-conservatives.com/2026/07/22/11519/) _2026-07-22 · prudhoeconservatives · Prudhoe Matters_ https://one.network/ ## [Moor grange resurfacing 1/9/26](https://prudhoe-conservatives.com/2026/07/22/moor-grange-resurfacing-1-9-26/) _2026-07-22 · prudhoeconservatives · Prudhoe Matters_ https://www.facebook.com/share/1E1WfuJPpR/?mibextid=wwXIfr ## [Holiday time](https://prudhoe-conservatives.com/2026/07/19/holiday-time/) _2026-07-19 · prudhoeconservatives · Prudhoe Matters_ Many people will be taking time off work to go on holiday. This includes NCC team members, Housing providers, etc. ## [Signigicant investment – Fuse](https://prudhoe-conservatives.com/2026/07/13/signigicant-investment-fuse/) _2026-07-13 · prudhoeconservatives · Prudhoe Matters_ Significant investment being made into Prudhoe to provide local specialist education . Huge benefits for the young learners by being close to home. Creating TynedaleJobs… ## [Residents’ views needed on alcohol concerns in Prudhoe](https://prudhoe-conservatives.com/2026/07/08/residents-views-needed-on-alcohol-concerns-in-prudhoe/) _2026-07-08 · prudhoeconservatives · Prudhoe Matters_ https://www.hexham-courant.co.uk/news/26258641.residents-views-needed-alcohol-concerns-prudhoe/ ## [More safety measures- Cottier grange entrance.](https://prudhoe-conservatives.com/2026/07/05/more-safety-measures-cottier-grange-entrance/) _2026-07-05 · prudhoeconservatives · Prudhoe Matters_ https://www.facebook.com/share/1D4k6mf1p4/?mibextid=wwXIfr ## [Highfield Planning app update 3/7/26](https://prudhoe-conservatives.com/2026/07/03/highfield-planning-app-update-3-7-26/) _2026-07-03 · prudhoeconservatives · Prudhoe Matters_ 25/01971/FUL Check out the NCC Planning portal CLICK HERE Full planning application for the construction of 65no. residential dwellings (Use Class C3) with associated landscaping, access arrangements, parking and infrastructure (amended red line boundary 01.04.2026) Consultation is live as another major amendment has been made by the applicant. ## [Open coordination for humans & AI (Sponsored)](https://crawlproof.com/a/fe6U879k2PTm) _2026-07-03 · **Sponsored**_ Shared schemas and CLI tooling to validate, route, and audit human-agent workflows. ## [Account Takeover in Facebook mobile app due to usage of cryptographically unsecure random number generator and XSS in Facebook JS SDK](http://localhost:4000/uncategorized/2026/01/17/math-random-facebook-sdk.html) _2026-01-16 · Youssef Sammouda (sam0) personal blog_ Facebook Javascript SDK and Facebook plugins ## [Instagram account takeover via Meta Pixel script abuse](http://localhost:4000/uncategorized/2026/01/16/leaking-fbevents-ato.html) _2026-01-15 · Youssef Sammouda (sam0) personal blog_ Introduction Meta’s web ecosystem relies on cross-window messaging between first-party websites. In many cases, the only security control enforced is an origin check validating that messages originate from facebook.com or its subdomains. ## [Multiple cross-site leaks disclosing Facebook users in third-party websites](http://localhost:4000/uncategorized/2026/01/16/cross-site-leaks.html) _2026-01-15 · Youssef Sammouda (sam0) personal blog_ Introduction This write-up consolidates several XS-Leak issues discovered across Meta-owned platforms, including Facebook, Workplace, Meta for Work, and internal Meta surfaces. ## [Leaking Meta FXAuth Token leading to 2 click Account Takeover](http://localhost:4000/uncategorized/2026/01/16/leaking-fxauth-token.html) _2026-01-15 · Youssef Sammouda (sam0) personal blog_ Introduction FXAuth is Meta’s shared authentication system used across Facebook, Instagram, and Meta (Horizon / VR). It is used by Accounts Center for account linking, re-authentication, and sensitive action confirmation. ## [Two-click Facebook account takeover via FXAuth token and blob theft](http://localhost:4000/uncategorized/2026/01/15/steal-fxauth-leads-instagram-ato.html) _2026-01-14 · Youssef Sammouda (sam0) personal blog_ Introduction Facebook and Instagram accounts are deeply integrated through Accounts Center, allowing users to link identities, share authentication methods, and manage security settings across platforms. ## [Self-XSS in Facebook payments flow leads to Instagram and Facebook account takeovers](http://localhost:4000/uncategorized/2026/01/15/self-xss-facebook-payments.html) _2026-01-14 · Youssef Sammouda (sam0) personal blog_ Introduction Facebook’s payments and billing flows rely heavily on third-party financial service providers. To facilitate bank-based payments, Facebook embeds external services inside privileged Facebook pages and allows cross-window communication between those services and facebook.com. ## [Datr cookie theft and AI leads to Facebook account takeover via trusted device recovery](http://localhost:4000/uncategorized/2026/01/15/steal-dtsg-cookie.html) _2026-01-14 · Youssef Sammouda (sam0) personal blog_ Introduction Facebook relies on long-lived device identifiers to reduce friction for returning users and to distinguish legitimate activity from suspicious logins. Over time, devices that repeatedly authenticate to the same account are treated as trusted, allowing Facebook to relax certain security requirements during sensitive flows such as account recovery. ## [Multiple XSS in Meta Conversion API Gateway Leading to Zero-Click Account Takeover](http://localhost:4000/uncategorized/2026/01/13/capig-xss.html) _2026-01-13 · Youssef Sammouda (sam0) personal blog_ Introduction ## [View insights for any Instagram Professional Account post](https://philippeharewood.com/view-insights-for-any-instagram-professional-account-post/) _2025-11-14 · admin · These aren’t the access\_tokens you’re looking for_ In the Meta for Business Ad Partnership hub, https://business.facebook.com/partnership\_ads\_hub/ad\_content there are tools available to see insights for content of partners. It is possible to use the partnership\_ads\_hub\_content\_details in GraphQL to view insights for any professional Instagram account post. new… ## [Error messages from Instagram Shared Login landing screen include internal paths](https://philippeharewood.com/error-messages-from-instagram-shared-login-landing-screen-include-internal-paths/) _2025-11-08 · admin · These aren’t the access\_tokens you’re looking for_ If an Instagram user tries to access the Shared Login screen in the mobile app and does not pass gating, the IGBloksAppRootQuery Graphql call will fail for the blok app com.bloks.www.async.components.ig\_permissions.account\_owner.onboarding\_landing\_screen with a traceback of internal paths The response contained internal traceback information related to gating and privacy checks. Timeline Nov 8,… ## [Zuverlässiges Hosting, Domains, Server (Sponsored)](https://crawlproof.com/a/GMEffdBZ4BY0) _2025-11-08 · **Sponsored**_ Zuverlässige Infrastruktur, niedrige Preise und skalierbare Server für deinen Webauftritt. ## [Page admin and email disclosure](https://philippeharewood.com/page-admin-and-email-disclosure/) _2025-03-04 · admin · These aren’t the access\_tokens you’re looking for_ The AdsLeadGenLeadRetrievalEmailModalContainerQuery GraphQL query has a field page\_admins\_with\_manage\_leads\_access with no access control on it, leading to disclosure of a Facebook page admin as well as their personal email address. 1. Login to facebook.com as Attacker 2. Open Chrome Developer Tools and insert the following script for a GraphQL query require("AsyncRequest"); new… ## [Internal path disclosure on Meta View app (now Meta AI)](https://philippeharewood.com/internal-path-disclosure-on-meta-view-app-now-meta-ai/) _2024-10-16 · admin · These aren’t the access\_tokens you’re looking for_ When using Meta Rayban glasses for image detection, a photo is captured and then uploaded to rupload.facebook.com/photoshub\_upload\_media\_ar\_chunked\_everstore. If the mmai activity in the request header isn t set correctly, the upload will fail with an error disclosing internal paths. Timeline Oct 16, 2024 – Report sentOct 21, 2024 – Report triaged by MetaOct 24, 2024 – Bounty Continue reading… ## [Everstore Video Disclosure via Graph API](https://philippeharewood.com/everstore-video-disclosure-via-graph-api/) _2024-09-20 · admin · These aren’t the access\_tokens you’re looking for_ This post investigates the behavior of Everstore video uploads when interacting with Meta’s Graph API. Everstore, Meta s proprietary blob storage system, handles a variety of data types, including video files. Through testing, it was observed that videos uploaded from Everstore can be disclosed via the /me/videos endpoint. Despite receiving an error message during the upload Continue reading…