Facebook account takeover due to a wide platform bug in ajaxpipe responses

https://ysamm.com/?p=654

…