Hacker News Reader

Looks like if you edit facebook in firebug while you are posting a link to your newsfeed you can change the source userid which is not validated/checked and gets posted even though you dont have the permission to do it

View on HN

This isn't true.

Obviously you cannot do so any longer as the bug has been fixed, but that seems like a good description of the exploit as shown in the video.

Reply on news.ycombinator.com