Re: Facebook name extraction based on email/wrong password + POC

[White Snow <whit3.sn0w () yahoo de>]

When you are signed in to Facebook there is a feature which lets you upload your 
whole address book and will tell you if it found any of your friends. That way 
you can check many addresses and don't have to worry that they will present you 
with a captcha at the login form.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/