Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

How to harvest Facebook profiles from emails without logging in

petewarden.typepad.com

Post reply on HN
Print view View original

11–15 of 15 posts

Re: How to harvest Facebook profiles from emails without logging in

#11

Post by jonknee »

tarkin2 wrote: post #9

I've said it before, but I'd advise people change the email addresses they've attached to facebook. And definitely don't use the email address you give out to employers.

Or just adjust your privacy settings so that only your friends can see anything. I don't show up in search results for example.

Re: How to harvest Facebook profiles from emails without logging in

#12

Post by maxklein »

That's a pretty clever trick. I heard from some people that after doing the bulk upload thing, if your account in any way promotes a business, it gets shutdown after about a week. Anyone who uploads large contact lists to facebook gets into some type of human review system.

Re: How to harvest Facebook profiles from emails without logging in

#13

Post by maurycy »

catch23 wrote: post #6
maurycy wrote: post #5

Earlier quoted context omitted.

The cookie slows down the things a bit. I've never had such problem but what about complete randomization of static URLs, so they are not easily findable? If the leaks are the issue, one might want to change the names, or just filesystem symlinks, periodically.

couldn't they just solve it by serving up an image with a hash of the facebook uid as the filename?

Facebook uid = users.id? It gives zero privacy then.

Re: How to harvest Facebook profiles from emails without logging in

#14

Post by grannyg00se »

I don't see how this is a 'security hole'. You're still going to be subject to the user's security restrictions when you go to their profile. You won't get anymore information than you would if you had searched their name and opened their profile legitimately.
Post reply on HN