5,600,429 Members 33,019 Now Online
XDA Developers Android and Mobile Development Forum

[APP][2.0+]FB SDK Checker

Tip us?
 
vvieux
Old
#1  
Junior Member - OP
Thanks Meter 13
Posts: 9
Join Date: Nov 2010
Location: Paris
Exclamation [APP][2.0+]FB SDK Checker

Hi,

You've probably heard this: On 10 Apr 2012 a blog post from Parse (http://blog.parse.com/2012/04/10/dis...s-android-sdk/) indicates they found a major security issue in the Facebook SDK. they reported the issue in mid-february and the issue is now solved.

But tons of apps didn't update the Facebook SDK yet and still have the security hole.

With FB SDK Checker, you can check if any of you app is exposing your access token.

Google Play: https://market.android.com/details?i...x.fbsdkchecker
Source: https://github.com/vieux/FB-SDK-Checker

It's scary, for exemple Draw Something exposes the access token each time you launch the app.
The Following 11 Users Say Thank You to vvieux For This Useful Post: [ Click to Expand ]
 
SalsaForte
Old
#2  
SalsaForte's Avatar
Senior Member
Thanks Meter 14
Posts: 252
Join Date: Dec 2010
Location: Montreal

 
DONATE TO ME
Just tested it on my phone. I'm exposed!

Is there a way for the FB:SDK checker to show which app(s) exposed the token?
MY GEAR: Nexus 21 (4+7+10)
GIRLFRIEND GEAR: Apple iPhone 5
ME: Google+
 
vvieux
Old
#3  
Junior Member - OP
Thanks Meter 13
Posts: 9
Join Date: Nov 2010
Location: Paris
I'm working on it.
The Following 2 Users Say Thank You to vvieux For This Useful Post: [ Click to Expand ]
 
sinatra_shinoda
Old
(Last edited by sinatra_shinoda; 17th April 2012 at 12:16 AM.)
#4  
sinatra_shinoda's Avatar
Senior Member
Thanks Meter 34
Posts: 119
Join Date: Apr 2011
Location: Kota Kinabalu

 
DONATE TO ME
Quote:
Originally Posted by vvieux View Post
I'm working on it.
Is it working now?

EDIT: Installed & Tested. It's working, but it didn't tell which app(s)is exposing the token.
Devices:-
SE Xperia X10i:CWM6, 4.1.2, [CM10] BY CMX10
SE Xperia Active: Stock, 4.0.4, ICS Official
Samsung Galaxy S II GT-I9100G: 3e, 4.0.3, ICS Official
 
trestevenson
Old
#5  
trestevenson's Avatar
Senior Member
Thanks Meter 13
Posts: 124
Join Date: Oct 2010
Location: Largo

 
DONATE TO ME
Quote:
Originally Posted by vvieux View Post
I'm working on it.
Thanks for the heads up!
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes