Use fake Facebook account to login with another user on Stack Overflow

StackOverflow https://stackoverflow.com/questions/11808291

Question

For login to Stack Overflow I use Yahoo's OpenID service. Today, I tried to register on Stack Overflow with my Facebook account. When I allowed Facebook to give my information to Stack Overflow, I was logged in to my Yahoo account.

In this case, Stack Overflow used my email to register me and my email was in the Stack Overflow users database so I logged in to main account (Yahoo) and now I have two OpenID acounts.

When a user has not confirmed his email on Facebook, is this process also correct? If yes, some users can login to another account with faked Facebook account to the Stack Overflow.

Note: I don't know how we could check status of email on Facebook account with Facebook Graph API. My question on Stack Overflow is Is a user's email address confirmed in Facebook Graph API?

Was it helpful?

Solution

You can't sign into Stack Exchange (or anything actually) with Facebook without having confirmed your email address.

You get a message that looks something like this:

enter image description here

Licensed under: CC-BY-SA with attribution
Not affiliated with StackOverflow
scroll top