Security Hole Discovered in Facebook And Dropbox iOS Apps

Security researcher Gareth Wright discovered that many iOS and Android applications store Facebook access tokens, a sequence of characters that give access to an account, in a plain text file. This file can then be used by anyone to retrieve information from an account, and in the worst case spoof your Facebook identity.
Continue reading →