Facebook login open to enumeration
The error message above is in Swedish, the short version: “The e-mail address you entered isn’t connected to any account in our system.” So instead of telling me that my username / password combo was unsuccessful they actually help me with half the problem. If they only would have told me that the username and password combo was bad I wouldn’t know if I had the correct e-mail address for the account i’m interested in. So I will just try the different e-mail addresses I know of my intended target with some bullshit password until I get “wrong password” error and then I know what e-mail they use. Really not good Facebook!
Hackviking aka Kristofer Källsbo 