Facebook users currently lack the ability to forcibly reset their Facebook Social Login access tokens. Attackers behind the Facebook mega-breach may still be able to access victims’ accounts at third-party web services and mobile apps. Facebook has offered no timeline for when that might change. Facebook says it’s reset 90,000 access tokens, but some developers may not use its official software development kit. Facebook: Us, Enforce Rules? Facebook, however, does not enforce these best practices, while also putting users at risk.”]