Live data from Hacker News

Facebook Graph API robots.txt

graph.facebook.com

31–40 of 44 posts

Re: Facebook Graph API robots.txt

#33
So bots get some non-standard file for robots.txt.

Guess no one at facebook has noticed the vulnerability exposed with pretty usernames on facebook & ignoring "." in a different framework. (probably just following gmail usernames.)

Re: Facebook Graph API robots.txt

#35
post #27

Earlier quoted context omitted.

I can see the following as a logged-in facebook user, which is identical to what the graph api returns: http://imgur.com/8y8hf.png I'm not seeing a discrepancy here?

Like I said, the discrepancy is if you're NOT logged in.

I'm not seeing an issue here though -- that profile information was readily available in html (if you have a facebook cookie) and is now even more accessible via json.

In fact, the json api gives out less information than the html frontend (e.g. all 18 pages you currently follow).

Re: Facebook Graph API robots.txt

#37
post #7

I started playing with this new api today. My room mate and I spent an hour with various privacy settings and it does not appear there is any way to prevent your account from being accessed via this.

So you're able to get someone's facebook id and name? How useful is that? It seems about as useful as scraping web pages for random names & numbers. Might as well go to classmates.com and get a list of names there.

name, id, AND full size profile picture

Re: Facebook Graph API robots.txt

#38
post #35

Earlier quoted context omitted.

Like I said, the discrepancy is if you're NOT logged in.

I'm not seeing an issue here though -- that profile information was readily available in html (if you have a facebook cookie) and is now even more accessible via json. In fact, the json api gives out less information than the html frontend (e.g. all 18 pages you currently follow).

Like he said, the discrepancy is when you are not logged in. I can see his info and his private profile pic although I don't even have a facebook account and the html version gives me a 404.

Re: Facebook Graph API robots.txt

#39
post #38
post #35

Earlier quoted context omitted.

I'm not seeing an issue here though -- that profile information was readily available in html (if you have a facebook cookie) and is now even more accessible via json. In fact, the json api gives out less information than the html frontend (e.g. all 18 pages you currently follow).

Like he said, the discrepancy is when you are not logged in. I can see his info and his private profile pic although I don't even have a facebook account and the html version gives me a 404.

It's not a big deal, anyone could make a throwaway FB account and see the same data. The difference is almost immeasurable.
Post reply on HN