I just noticed: If you know the URL of a photo in facebook, you don’t have to have permissions to see it! You don’t even have to log in to facebook!
Check out, one of mine.
Is this a privacy hole? Is it a feature? Should users be concerned?
-
Archives
- May 2010 (1)
- March 2010 (3)
- February 2010 (1)
- December 2009 (1)
- November 2009 (3)
- July 2009 (3)
- June 2009 (5)
- April 2009 (3)
- March 2009 (2)
- December 2008 (1)
- November 2008 (2)
- September 2008 (3)
- August 2008 (6)
- July 2008 (6)
- June 2008 (4)
- May 2008 (5)
- April 2008 (3)
- February 2008 (9)
- January 2008 (1)
- December 2007 (5)
- November 2007 (5)
- October 2007 (2)
- September 2007 (5)
- July 2007 (4)
- June 2007 (5)
- May 2007 (3)
- November 2006 (1)
- October 2006 (10)
- September 2006 (26)
- August 2006 (7)
- July 2006 (15)
- June 2006 (17)
- May 2006 (9)
- April 2006 (11)
- March 2006 (21)
- February 2006 (29)
- January 2006 (22)
- December 2005 (31)
- November 2005 (16)
- October 2005 (4)
- September 2005 (4)
- August 2005 (1)
- July 2005 (10)
- June 2005 (29)
- May 2005 (2)
- April 2005 (1)
- March 2005 (5)
- February 2005 (7)
- January 2005 (10)
- December 2004 (7)
- November 2004 (16)
- October 2004 (14)
- September 2004 (4)
- August 2004 (5)
- July 2004 (10)
Its clearly a hole but I woudn’t hold it against them, securing static assets without causing caches to dimiss things immdiatelly is a bitch. Most major hosts just reshuffle things periodically or pay more for bandwidth.
I think that users should be concerned about whom they add as a friend more than that.
that’s what this little program does
http://www.vincentcheung.ca/facedown/