Why Can a Facebook Application Manage My Pages?

F-Secure Antivirus Research Weblog

The applications also want permission to “Manage my pages”.

That’s a problem because if the spammer gains access to your Page, it can be used to spread even more spam, and to collect your Page’s insight data.

This seems like something that Facebook really should change… we’re generally comfortable with the application controls that are in place. To develop an application, you need to validate your account with either a phone number or a credit card. And each user must approve the request for permissions.

But really, how many applications need to manage your pages?!?

There really should be an extra account validation in place to develop that particular feature.

Several of the applications shown above are now offline, but we’re seeing new applications spawning to take their place. Facebook’s antispam team has a busy day ahead.

via Happy Spamgiving Day.

Good question.