How I Hacked Facebook’s Secure Files Transfer Service for Employees
I'm confused. This looks like an interesting hack, but I don't understand what's going on here, despite reading the post 4 times and watching the video twice.<p>What is this "Password Recovery" page? Is this for emailing a person a reset link to a password? Is it for changing your password? What is the cookie used for? What is the flawed logic in the system?<p>Can anyone explain this more clearly please?