Silently Using Facebook XMPP
XMPP login was not listed in Sessions Tab. Facebook could be accessed via XMPP and can be used as messenger. Using Jabber client you can connect at chat.facebook.com:5222
TLDR; XMPP login was not listed in Sessions Tab
Facebook could be accessed via XMPP and can be used as messenger. Using Jabber client you can connect at chat.facebook.com:5222
Bug
But this active login was not listed in Setting > Security > Sessions
So X can login into Y’s account (Provided X know the credentials) X can chat without Y being able to see the active session
Additional bug that existed along side was if you login into Facebook using XMPP and forget to logout you will have to reset your password and check “Logout other sessions” to logout remotely.
The Fix
The bug was fixed and chat section was added in Sessions Tab
Timeline
- Bug reported - June 18, 2014
- Report rejected - June 18, 2014
- More info sent - June 18, 2014
- Bug triaged - June 19, 2014
- Bug Fixed - August 15, 2014