Live data from Hacker News

Facebook security hole allows viewing of private photos

forum.bodybuilding.com

1–10 of 143 posts

Re: Facebook security hole allows viewing of private photos

#3

Seems to be already fixed. The last option described in this tutorial is not there anylonger.

Reading the thread, it seems that it doesn't work for all accounts and there is speculation it only works if you have us english locale.

Re: Facebook security hole allows viewing of private photos

#9

It would seem based on the screenshot ("Message x to ask them to remove the photo...") that they must have specific permissions set to cause this to work as I can't replicate on people that I can't message.

I disagree. You can message people that you aren't friends with. See the first screen shot ("add her as a friend or send her a message").

I think the reason it only works on some profiles it that perhaps the profile pictures are the only ones that it will show you. And some people only have one profile photo. (This is an untested theory / guess.)

Re: Facebook security hole allows viewing of private photos

#10

Excellent find. You can even access around 25 photos from Mark Zuckerberg's profile. http://imgur.com/a/PrLrB (ps: what a nice photo of them on halloween. very generous too I can see!)

Interesting that those are full-sized. It appeared in the forum post to only be giving access to thumbnail resizes of the original images.
Post reply on HN