Youssef Sammouda (sam0) personal blog · Jan 16, 2026
Account Takeover in Facebook mobile app due to usage of cryptographically unsecure random number generator and XSS in Facebook JS SDK
0Sign in to vote or save
This page cannot be shown here. You can still read it on the original site — the toolbar below keeps your place in the directory.
Facebook Javascript SDK and Facebook plugins
Comments
Nothing yet. Say the first thing.
Sign in to join the conversation.