Facebook CSRF leading to full account takeover (fixed)222 points by franjkovicRead the articleDiscussion on Hacker News