All your Facebook Access Tokens are belong to us

Post by zaidf » Tue, Oct 29, 2013, 4:34 PM UTC

davidkuridza wrote: post #9

zaidf wrote: post #7

We condemn anyone that stores passwords as plaintext. Time to treat access tokens as nothing less than a password.

How would you store access tokens on a device, using two-way encryption or do you have something else in mind?

Post by colinhowe » Tue, Oct 29, 2013, 5:07 PM UTC

zaidf wrote: post #11

davidkuridza wrote: post #9

Earlier quoted context omitted.

How would you store access tokens on a device, using two-way encryption or do you have something else in mind?

Two way encryption, yep.

Post by snarfy » Tue, Oct 29, 2013, 5:46 PM UTC

colinhowe wrote: post #13

zaidf wrote: post #11

Earlier quoted context omitted.

Two way encryption, yep.

but then for any reasonable application to be able to use them they'll need to store the unencryption key anyway..

Post by mohaab » Tue, Oct 29, 2013, 6:37 PM UTC

thehme wrote: post #10

Can't read blog post: Error 520 Ray ID: c513da5e9750697 Web server is returning an unknown error https://support.cloudflare.com/hc/en-us/articles/200171936-E... humm...