Facebook Graph API robots.txt

mitchellh wrote: post #2

It appears you can put a period anywhere within the ID after the initial "/" and it works: http://graph.facebook.com/robot.stxt http://graph.facebook.com/r.o.b.o.t.s.t.x.t This guy's actual short-URL is "robotstxt."

[deleted]

Re: Facebook Graph API robots.txt

#5

Post by [deleted] » Fri, Apr 23, 2010, 6:43 AM UTC

[deleted]

Re: Facebook Graph API robots.txt

#6

Post by sev » Fri, Apr 23, 2010, 6:44 AM UTC

mitchellh wrote: post #2

It appears you can put a period anywhere within the ID after the initial "/" and it works: http://graph.facebook.com/robot.stxt http://graph.facebook.com/r.o.b.o.t.s.t.x.t This guy's actual short-URL is "robotstxt."

It's not just periods. They're filtering out certain characters [.,-]

hxxp://graph.facebook.com/-----r.-o....b....o-t-s-t....x....t----....///////////___%%20%22/test/robots

will still output the same result as http://graph.facebook.com/robotstxt

Re: Facebook Graph API robots.txt

#7

Post by geuis » Fri, Apr 23, 2010, 6:47 AM UTC

I started playing with this new api today. My room mate and I spent an hour with various privacy settings and it does not appear there is any way to prevent your account from being accessed via this.

Re: Facebook Graph API robots.txt

#8

Post by oscardelben » Fri, Apr 23, 2010, 6:53 AM UTC

What's interesting is that you can put the id in the url and get their data (example: http://graph.facebook.com/677195182).

I'm not entirely sure about what you could do with this data, but it's there, for anyone to see.

Re: Facebook Graph API robots.txt

#9

Post by dasrecht » Fri, Apr 23, 2010, 6:53 AM UTC

so your name will be published out to the web?

you can set the userid as parameter and you get Mark Zuckerbergs Profile here : http://graph.facebook.com/4

Then you can simple count up to infinite to get the other profiles. The API has a Usage limit and blocks after a while

Re: Facebook Graph API robots.txt

#10

Post by ryanjmo » Fri, Apr 23, 2010, 7:08 AM UTC

geuis wrote: post #7

I started playing with this new api today. My room mate and I spent an hour with various privacy settings and it does not appear there is any way to prevent your account from being accessed via this.

That is because the info that is available at http://graph.facebook.com/name is http://facebook.com/name . What part of your account are you trying to stop from being accessed? This makes no sense.