Denials don't fix Facebook security flaw on iOS, Android