Live data from Hacker News

Facebook Graph API robots.txt

graph.facebook.com

41–44 of 44 posts

Re: Facebook Graph API robots.txt

#42
post #39
post #38

Earlier quoted context omitted.

Like he said, the discrepancy is when you are not logged in. I can see his info and his private profile pic although I don't even have a facebook account and the html version gives me a 404.

It's not a big deal, anyone could make a throwaway FB account and see the same data. The difference is almost immeasurable.

You don't think its a big deal that I can crawl FB to capture the names and pictures of people, regardless of their privacy settings?

Re: Facebook Graph API robots.txt

#43
post #6

It appears you can put a period anywhere within the ID after the initial "/" and it works: http://graph.facebook.com/robot.stxt http://graph.facebook.com/r.o.b.o.t.s.t.x.t This guy's actual short-URL is "robotstxt."

It's not just periods. They're filtering out certain characters [.,-] hxxp://graph.facebook.com/-----r.-o....b....o-t-s-t....x....t----....///////////___%%20%22/test/robots will still output the same result as http://graph.facebook.com/robotstxt

This is the sort of thing that leads to exploits.

Re: Facebook Graph API robots.txt

#44
post #29
post #18

Earlier quoted context omitted.

I don't like the fact that Facebook makes any of my data available and doesn't provide me options to make it private at will. I have my privacy settings turned all the way up for everything. Perhaps I, and others, simply would like to not have any of our data available in this manner.

I agree with you. As of now, your only option is to not use fb.

That's good advice. For anyone interested in taking it, see "How to permanently delete your Facebook account": http://www.facebook.com/group.php?gid=16929680703
Post reply on HN