@SeanWrightSec Also "not a hack", yet > using software to imitate our app If that functionality was supposed to be restricted to their app, then surely that's a broken access control? What definition of hack are facebook _actually_ using?