5 ms·
Facebook Graph API robots.txt
- mitchellh 17y agoIt appears you can put a period anywhere within the ID after the initial "/" and it works: http://graph.facebook.com/robot.stxt http://graph.facebook.com/robot.stxt http://graph.facebook.com/r.o.b.o.t.s.t.x.t http://graph.facebook.com/r.o.b.o.t.s.t.x.t This guy's actual short-URL is "robotstxt."
- deleted 17y ago[deleted]
- sev 17y agoIt's not just periods. They're filtering out certain characters [.,-] hxxp://graph.facebook.com/-----r.-o....b....o-t-s-t....x....t----....///////////___%%20%22/test/robots will still output the same result as http://graph.facebook.com/robotstxt http://graph.facebook.com/robotstxt
- theli0nheart 17y agoThis is the sort of thing that leads to exploits.
- vark 17y agoalso see: http://graph.facebook.com/default.aspx http://graph.facebook.com/default.aspx
- tfh 17y agoand http://graph.facebook.com/default.html http://graph.facebook.com/default.html
- luckygerbils 17y agoAnd http://graph.facebook.com/.htaccess http://graph.facebook.com/.htaccess
- bruceboughton 17y agoReminds me of Little Bobby Tables: http://xkcd.com/327/ http://xkcd.com/327/
- deleted 17y ago[deleted]
- keltex 17y agoYou could do this for hours: http://graph.facebook.com/sitemap.xml http://graph.facebook.com/sitemap.xml
- crad 17y agoSurprised that http://graph.facebook.com/phpinfo.php http://graph.facebook.com/phpinfo.php isn't taken.
- stevejalim 17y agohttp://graph.facebook.com/home.html http://graph.facebook.com/home.html http://graph.facebook.com/index.html http://graph.facebook.com/index.html [edit: added another one]
- deleted 17y ago[deleted]
- geuis 17y agoI started playing with this new api today. My room mate and I spent an hour with various privacy settings and it does not appear there is any way to prevent your account from being accessed via this.
- ryanjmo 17y agoThat is because the info that is available at http://graph.facebook.com/name http://graph.facebook.com/name is <= the info that is available at http://facebook.com/name http://facebook.com/name . What part of your account are you trying to stop from being accessed? This makes no sense.
- thamer 17y agoMy “graph” link is public, but my “public page” link is not. It might be because I don’t allow my profile to appear in public searches (non logged in), but still they made it visible to anyone in the graph API. I hope they add a privacy setting to change this.
- geuis 17y agoI don't like the fact that Facebook makes any of my data available and doesn't provide me options to make it private at will. I have my privacy settings turned all the way up for everything. Perhaps I, and others, simply would like to not have any of our data available in this manner.
- dhimes 17y agoI agree with you. As of now, your only option is to not use fb.
- koanarc 17y agoThat's good advice. For anyone interested in taking it, see "How to permanently delete your Facebook account": http://www.facebook.com/group.php?gid=16929680703 http://www.facebook.com/group.php?gid=16929680703
- oscardelben 17y agoWhat's interesting is that you can put the id in the url and get their data (example: http://graph.facebook.com/677195182 http://graph.facebook.com/677195182). I'm not entirely sure about what you could do with this data, but it's there, for anyone to see.
- dasrecht 17y agoso your name will be published out to the web? you can set the userid as parameter and you get Mark Zuckerbergs Profile here : http://graph.facebook.com/4 http://graph.facebook.com/4 Then you can simple count up to infinite to get the other profiles. The API has a Usage limit and blocks after a while
- knorby 17y agoMuch more than users apparently. It looks like everyting is thrown in here: http://developers.facebook.com/docs/api http://developers.facebook.com/docs/api
- tfh 17y agoAnyone knows why they are skipping IDs? Why didn't he pick id=1?
- oscardelben 17y agoPerhaps those were just tests, and databases use incremental index but don't care if you delete a record.
- gojomo 17y agoWinklevoss, Winklevoss, and Narendra? :)
- deleted 17y ago[deleted]
- aplari 17y agoalso: http://graph.facebook.com/4/picture?type=large http://graph.facebook.com/4/picture?type=large
- thedjpetersen 17y agoIt will be interested if anyone ever does a dump of all the data availible
- oscardelben 17y agoI just realized that if you supply an access token you have access to even more information for record.
- CoryMathews 17y agoSeems that its only more info based on your account. Unless Im missing something.
- jyothi 17y agoSo bots get some non-standard file for robots.txt. Guess no one at facebook has noticed the vulnerability exposed with pretty usernames on facebook & ignoring "." in a different framework. (probably just following gmail usernames.)
- tszming 17y agohttp://graph.facebook.com/laden http://graph.facebook.com/laden { "error": { "type": "QueryParseException", "message": "Some of the aliases you requested do not exist: laden" } }