[Avia]

Hmm, none of my friends have liked it yet nor have i.

[Ergo Proxy]

Right, big fracking deal. It's likely just a worm. There's literally hundreds of malicious FB apps that could do this, and even some silent ones. In fact, I'm building an app that could potentially be applied in this manner (looking for prices -- check my sig, right link)

Well I said in the beginning it's NOT botted (which means apps). My friend who was a victim of liking the page had no suspicious apps on his account. He was most likely silently clickjacked off a reputable website or it was a worm on his computer (both are highly unlikely since in my opinion).

[ddol]

I've seen a few users like this page for no reason, but they clicked this url that led them to this news story. So this would probably be some javascript/autoredirector.

[Crake]

Well I said in the beginning it's NOT botted (which means apps). My friend who was a victim of liking the page had no suspicious apps on his account. He was most likely silently clickjacked off a reputable website or it was a worm on his computer (both are highly unlikely since in my opinion).

There's ways to use an app with a FB account without it being listed.

[Goodies]

Can you say, CSERF?
It's possible. I don't doubt it for a second.

[Crake]

Well I said in the beginning it's NOT botted (which means apps). My friend who was a victim of liking the page had no suspicious apps on his account. He was most likely silently clickjacked off a reputable website or it was a worm on his computer (both are highly unlikely since in my opinion).

There's ways to use an app with a FB account without it being listed.

[Ergo Proxy]

There's ways to use an app with a FB account without it being listed.

You're saying you could accept permissions to an app without it being listed? Wouldn't that be an exploit?

[Crake]

You're saying you could accept permissions to an app without it being listed? Wouldn't that be an exploit?

No, that's not what an exploit is at all, as it can all be performed strictly on the client side. I'm being purposefully vague so as not to give away the details of my project 😝

[Stealth™]

This is fucking hilarious.

3 of my friends "liked" it already lol.

I love all of the comments on the picture that say "I don't remember liking this page..."

[Ergo Proxy]

No, that's not what an exploit is at all, as it can all be performed strictly on the client side. I'm being purposefully vague so as not to give away the details of my project 😝

Well if an app evades the app listing it technically would be an exploit wouldn't it?

[Goodies]

I FOUND THE EXPLOIT!
Get 10k+ Likes on your page!

Spoiler (Click to View)

The profile picture:

[Crake]

Well if an app evades the app listing it technically would be an exploit wouldn't it?

Not by my interpretation (a manipulation of a vulnerability in a system to create effects not originally intended). I would not remotely call the method I'm sure this uses a "vulnerability".

[Regulus]

I will definitely keep myself updated on this page. Have no idea on what this could be. Just hope i won't like this page automatically.

[ha4x0r]

Just that app feature, spreading the app page to people for them to allow it and he likes his own posts.

[`Xez]

I know exactly how this is done. Pretty great isn't it?
Does anyone who liked the page use chrome as their browser? Because i can bet every single person who liked the page does.