La fonctionnalité "se connecter avec FaceBook" utilisée par des tierces parties pour aspirer des données utilisateurs


#1

Data collection scenario #1

When a user wants to log into his account, the “Login with Facebook” feature makes a request to Facebook servers, which respond back with the Facebook account data that a user has allowed that specific site to access.

Third-party JavaScript code that loads on the login page is capable of intercepting this data and extracting user details.

Lire la suite ici .