Denny Huang says to YSITD http://devco.re/blog/2016/04/21/how-I-hacked-facebook-and-found-someones-backdoor-script/