30

Stories about: cross-domain access

Major Security Hole Discovered on Facebook and MySpace A Web developer has documented a proof-of-concept attack that could have been used to hijack accounts and steal private information on Facebook and MySpace. The attack leveraged a serious security oversight in XML configuration files used to define the cross-domain access policy for Flash applications.The discovery w... 6 November 2009 08:08 GMT