4 ms·

Not sure about the Graph API, but your name, your profile picture, and your contact list are all fully public information and you can't control their visibility

• brown9-2 15y ago
  Are you sure about that? How does one access this info? If I go to http://graph.facebook.com/<myusername> http://graph.facebook.com/<myusername>, the only data that is visible is: { "id": "...", "name": "...", "first_name": "...", "last_name": "...", "username": "...", "gender": "male", "locale": "en_US" }
  • michaelfairley 15y ago
    https://graph.facebook.com/michaelfairley/picture?type=large https://graph.facebook.com/michaelfairley/picture?type=large for the picture. Friends can be accessed similarly, but require an access token (_any_ access token, not just the user's that you're inspecting. More details at Facebook's API docs: https://developers.facebook.com/docs/reference/api/user/ https://developers.facebook.com/docs/reference/api/user/
    • fudged71 15y ago
      Wow. I am shocked that information I explicitly block to users (such as profile picture) are publicly available through a simple URL trick.
    • brown9-2 15y ago
      Friends can be accessed similarly, but require an access token (_any_ access token, not just the user's that you're inspecting. This would seem to be a bug if so, according to this page in the FB documentation: To get additional information about a user, you must first get their permission. At a high level, you need to get an access token for the Facebook user. After you obtain the access token for the user, you can perform authorized requests on behalf of that user by including the access token in your Graph API requests: https://developers.facebook.com/docs/reference/api/ https://developers.facebook.com/docs/reference/api/
  • kmavm 15y ago
    Try, e.g.: curl https://socialgraph.googleapis.com/otherme?q=<yourgmailacct>@gmail.com https://socialgraph.googleapis.com/otherme?q=<yourgmaila... Here's what they have to say about me, to anybody with a web browser, even though I've tried my hardest to opt out: https://socialgraph.googleapis.com/otherme?q=facebook.com/kma https://socialgraph.googleapis.com/otherme?q=facebook.com/km... {"http://twitter.com/keithmadams:{attributes:{atom:http://twitter.com/statuses/user_timeline/keithmadams.atom,bio:Engineer http://twitter.com/keithmadams:{attributes:{atom:http://twit... at Facebook, dad, cyclist.","exists":"1","rss":"http://twitter.com/statuses/user_timeline/keithmadams.rss,url:http://twitter.com/keithmadams,profile:http://twitter.com/keithmadams} http://twitter.com/statuses/user_timeline/keithmadams.rss,ur...},"http://www.quora.com/keith-adams:{attributes:{exists:1,photo:http://d2o7bfz2il9cb7.cloudfront.net/main-thumb-2418-100-zOwSN9N49abe8FyDUcKmtrSWB6fpNfzj.jpeg,fn:Keith http://www.quora.com/keith-adams:{attributes:{exists:1,photo... Adams","url":"http://www.quora.com/keith-adams,profile:http://www.quora.com/keith-adams}}}(dev1438:local-hphp:dbg:~)$ http://www.quora.com/keith-adams,profile:http://www.quora.co...
    • brown9-2 15y ago
      Are you using your Google account to login to these other services? That API call returns nothing for my address.
      • kmavm 15y ago
        No.
  • dxbydt 15y ago
    http://bit.ly/jcvm4R http://bit.ly/jcvm4R That's my list of the first 50 people who joined Facebook, using the Graph API & a bit of Java. Look for Saverin, Zuckerberg, Moskovitz & rest of the gang. Its all in there! Wrote this to find the first million facebook signons.