Wednesday, 10 August 2011

Trick to View Hidden Facebook Photos and Tabs found by BLACK WOLF


The code came from my own experiments on accessing the hidden photos. It worked quite manually, retrieving data from a particular Facebook interface and stuffing it into the current page. I figured a more elegant solution could be found by re-using the code already embedded in the page, but I had not been able to sort out all of the built-in functions.
Last night and this morning, I found what I’d been missing before, and I now present a far simpler version that gives full access to all available albums of a given user. Simply bookmark this link(right-click and choose to add a bookmark) and click the bookmark when viewing someone’s profile on Facebook.
Once again, please note that this does not in any way circumvent a user’s privacy settings. If you mark your albums as visible only to your friends, this trick will not override that setting. I do not currently know of a way to access private photo albums, and if I did find one, I would report it to Facebook. My purpose in posting this code is to prove a point, not break into users’ accounts.
Here is the new source code:


javascript:(function(){CSS.removeClass(document.body, ‘profile_two_columns’);tab_controller.changePage(“photos”);})()
As I said, much simpler! I only had to find the right commands.
But the story doesn’t end there. This new method can be very easily adapted to load other information from a user’s profile, and the new possibilities raise more privacy ramifications. Once again, the trick does not actually override any settings, but it may break some user expectations and highlight the importance of overlooked or unknown settings.
The new behavior is that once can use similar code to access the canvas pages of applications the user has interacted with, as if the user had added the application as a tab on their profile. This includes the “Boxes” tab for users who have it. From what I understand, visibility of this tab page comes from the “Privacy” box under “Edit Settings” next to each application listed in a user’s Application Settings. Such controls have often been overlooked, particularly because they may not have seemed very relevant in the past. While many users stay aware of the privacy settings on their photos and wall posts, they may not think about the content they generate in the context of applications. Often, that content has little if any privacy controls applied.
Typically, any information available on an application tab is also available through the application itself, but this technique makes it far easier to find. However, it also raises some disturbing possibilities related to application data retention, and issue I’ve noted in the past but not seen discussed much elsewhere. For example, quite a while ago (as in months to years), I used the Pieces of Flair application with my personal Facebook account, arranging various buttons on my virtual corkboard. Eventually I pared down the number of applications I had authorized, and Pieces of Flair was one I uninstalled a number of months ago. Today, however, if you use the sort of bookmarklet posted above to check my Facebook profile for a Pieces of Flair tab page, you’ll see all my virtual buttons once again.
Facebook does notify applications when a user uninstalls them, but it’s up to the developer to actually do something about the data left behind. Apparently Pieces of Flair does nothing with the data, meaning a user has to manually delete their flair before removing the application if they want to truly get rid of the content they generated. Based on my experience, many applications behave in a similar fashion. Some may argue that this behavior is similar to Facebook “deactivating” an account, but at what point should the content expire, and how many applications offer a full deletion? Such issues become matters of retention policies, and based on my past studies of whether applications even had a privacy policy, I would guess that most applications do not currently have such terms.
All of this once again highlights the current complexity of data and privacy on the Facebook Platform. Granted, dealing with third-party applications is not a simple problem to solve, and I’m not simply criticizing Facebook for failing to build a perfect system. But these issues can very easily lead to unpleasant surprises for end users, and at some point someone will have to sort them out.

17 comments:

  1. Normally I do not learn article on blogs, however I
    wish to say that this write-up very pressured me to try and do so!
    Your writing taste has been surprised me.
    Thank you, quite great post.

    Here is my website: http://Wiki.nonverbaal.nl/Index.Php?title=Gebruiker:SimonMont

    ReplyDelete
  2. Hi, I do believe this is a great blog. I stumbledupon it ;) I
    am going to return yet again since i have book
    marked it. Money and freedom is the greatest way to change, may you be rich and continue to guide others.


    Also visit my web page: relic watches

    ReplyDelete
  3. Informative article, exactly what I wanted to find.

    Also visit my page: connect.efind.com

    ReplyDelete
  4. Have you ever thought about including a little bit more than just
    your articles? I mean, what you say is fundamental and everything.
    However think of if you added some great photos or videos to give your posts more,
    "pop"! Your content is excellent but with pics and videos, this site could undeniably be one of the greatest
    in its field. Terrific blog!

    My blog post ... http://vitamindaily.com/

    ReplyDelete
  5. Nice blog here! Also your website loads up very fast!
    What web host are you using? Can I get your affiliate
    link to your host? I wish my web site loaded up as quickly as yours lol

    Also visit my web site ... watches for men

    ReplyDelete
  6. Hello! I just wanted to ask if you ever have any trouble with hackers?

    My last blog (wordpress) was hacked and I ended up losing many months of hard work due
    to no backup. Do you have any methods to stop hackers?

    Here is my blog; men's vestal watches

    ReplyDelete
  7. I am no longer certain where you are getting your information, however good topic.
    I needs to spend a while learning much more or working out more.
    Thank you for magnificent info I used to
    be looking for this information for my mission.


    Also visit my website - www.mymed.fr

    ReplyDelete
  8. Great post. I will be dealing with some of these issues
    as well..

    Have a look at my webpage: Sturling Watches For Men

    ReplyDelete
  9. I'm not sure exactly why but this site is loading very slow for me. Is anyone else having this issue or is it a problem on my end? I'll check back later on and see if the problem
    still exists.

    Here is my web page :: Akribos Watches

    ReplyDelete
  10. Today, I went to the beach front with my kids. I found a sea shell and gave
    it to my 4 year old daughter and said "You can hear the ocean if you put this to your ear." She placed the shell to her ear and screamed.
    There was a hermit crab inside and it pinched her ear.
    She never wants to go back! LoL I know this is totally off topic but
    I had to tell someone!

    Visit my webpage - rc

    ReplyDelete
  11. Right away I am going to do my breakfast, afterward having my breakfast coming yet again to read additional news.


    My web site :: seo expert

    ReplyDelete
  12. I write a comment when I especially enjoy a post on a site
    or I have something to valuable to contribute to the conversation.

    Usually it is triggered by the fire communicated in the post I read.

    And on this post "Trick to View Hidden Facebook Photos and Tabs found by BLACK WOLF".
    I was actually moved enough to post a comment :-) I
    actually do have a few questions for you if you do not mind.
    Could it be only me or does it seem like a few of these remarks look as if they are
    written by brain dead folks? :-P And, if you are posting at
    additional online sites, I'd like to follow you. Could you list every one of all your social sites like your twitter feed, Facebook page or linkedin profile?

    Here is my website :: Online Home Careers Scams

    ReplyDelete
  13. Wonderful post! We will be linking to this great post on our
    website. Keep up the great writing.

    Here is my page: Home income kit

    ReplyDelete
  14. I am truly pleased to glance at this webpage posts which consists of plenty of valuable information,
    thanks for providing these information.

    Also visit my homepage: Diet Patch Review

    ReplyDelete
  15. Thanks in favor of sharing such a nice thinking, piece
    of writing is nice, thats why i have read it completely

    Stop by my web page garcinia cambogia where to but

    ReplyDelete
  16. Where do you paste the code written up there? the CSS page or what?? I didn't get it~ >.<

    ReplyDelete
  17. If you would like to improve your experience simply keep
    visiting this website and be updated with the most recent news posted here.


    my web page :: http://advancedgarciniacambogias.com ()

    ReplyDelete