Hacking Facebook’s Legacy API, Part 1: Making Calls on Behalf of Any User
As a security researcher, the most impressive part of this is the response timeline from Facebook's security team. 3~ hours from first report to temporary patch! That's insane.