Hacker Gains Access To Facebook Accounts Once Again

The hacker broke into Facebook’s computer end February and gained access to all the accounts of its one billion users.

“Nir Goldshlager breaks into Facebook twice and publishes his results on his site.

Now that same hacker managed to bypass Facebook’s recently installed updated security, once again gaining access to the accounts of its users, according to Tweakers.net.

Nir Goldshlager, the hacker, published a report end February revealing how he bypassed Facebook’s ‘OAuth authentication’ by letting users who logged into Facebook click on a special app first.

The app required no special login or permission and was made to look as an ‘add-on feature’ to the social site.

That action gave Goldshlager access to the users’ information without restriction, including their private information and protected photos.

Luckily for Facebook, and all its users, Goldshlager wasn’t ill intended and didn’t steal or jeopardize any information. Instead he alerted Facebook about his discovery. The company awarded him for his hacking revelation and upgraded its social site’s security.

But Nir Goldshlager says that Facebook’s newest security enhancement is still not safe enough and than once again he managed to gain access to all users information simply by using Facebook’s own facebook.facebook.com redirect URL and modify it.

The modification allowed Goldshlager to forward Facebook users transparently to a special site he had created where he intercepted the users’ authentication tokens.

Once again, Goldshlager gained access to Facebook users’ personal information without restrictions.

Goldshlager says his newest hack doesn’t even require Facebook users to first accept the installation of an app before he gains access to their accounts. The only drawback to his recent hack is that he can only retrieve information one user at a time, the hacker said.

Nir Goldshlager says he informed Facebook about its security vulnerability on March 6th. The social site reportedly, immediately fixed the problem.

Goldshlager published his findings at his own site.