I just noticed: If you know the URL of a photo in facebook, you don’t have to have permissions to see it! You don’t even have to log in to facebook!

Check out, one of mine.

Is this a privacy hole? Is it a feature? Should users be concerned?