How meta was able to connect to the phone app and local ports to bypass browser security.