Facebook exploit – Confirm website visitor identities
Is there something in here we're missing?<p>Someone finds exploit, gets the bounty, facebook fixes and we have a timeline.<p>Sounds like the system worked... are we looking for something else here?