3 ms·

If you don't immediate terminate your fb account when you see this, you're like one of those people who can't leave their abuser. That's just all there is to i

If you don't immediate terminate your fb account when you see this, you're like one of those people who can't leave their abuser. That's just all there is to it. Just as a matter of interest, has anyone ever taken a close look at what's actually in the static content that you can download when you quit fb?

haldean 15y ago
Pretty much any of it. If there's a photo I want a friend of mine to see, but they don't have permission to see it, I just send them the URL of the static content and it works every time, whether or not they're logged in.
- rw 15y ago
  No longer. Images are obfuscated (view the source of a gallery image to see what I mean).
  - X-Istence 15y ago
    So you are not able to view the following link: https://fbcdn-sphotos-a.akamaihd.net/hphotos-ak-snc4/148199_509098132490_138900699_30219016_5205632_n.jpg https://fbcdn-sphotos-a.akamaihd.net/hphotos-ak-snc4/148199_... Just for reference the picture should be this: http://imgur.com/UYs6H http://imgur.com/UYs6H Oh ... the way I uploaded that to imgur? Using that URL above, so clearly that is wide open to the world.
    - thamer 15y ago
      Bert, your facebook profile ID is in that URL (the number starting with 1389...). Also, there is no restriction on who can see pictures when you a direct link to an image. This is mostly due to the fact that CDNs used to store static files usually don't send cookies and thus have no concept of a session.
      - X-Istence 15y ago
        My personal portfolio site is listed in my HackerNews profile, on my portfolio site I have a link to my Facebook profile (so that people I give my business card to are able to more easily find me, and not my dad). I am familiar with what is in the URL, and I am also familiar with CDN's. I was merely posting my rebuttal to the OP who said it was obfuscated.
  - jonknee 15y ago
    Not at all, they now even give you a link to download the image. You can share this publicly. Or just right click and choose "Copy Image URL". I viewed source and it's a standard container div setup, nothing obfuscated about it. The image URLs are all right there.
    - rw 15y ago
      Thanks for the correction--I got so used to being treated adversarily by FB that I failed to look for a link like that :-)
sans-serif 15y ago
That's it? So if I rationally weigh my cost of having to watch where I click and find it to be significantly less than the benefits from hanging out with friends online, I'm a victim of an "abuse"? It's a sad day for HN when thoughtful discussions have been replaced by such obvious sensationalism nonsense. We can compile kernels but Facebook's super-complex privacy settings reduce us to wimps.
- watmough 15y ago
  Here's the text I was thinking of when I wrote that: "So I was scared shitless when after RSVP'ing I see faces of all my facebook friends and an offer to invite them. I always thought you had to do the whole facebook connect crap before websites could just splash your fb friends list at you?" Someone was petrified that fb knows and may have already revealed something that person really wants to keep private. Sounds fairly abusive to me. How long is until you'll be able to 'connect' to the DMV via fb? What if you're a serial scofflaw, and have a trail of unpaid speeding tickets. We already have instances of debt collectors attacking fb profiles. What if state agencies try to get in on this act?
  - yuliyp 15y ago
    Watmough, you have to opt in to a site in order for that site to be able to access your information. However, social plugins allow your information to appear inside iframes on third-party sites (without revealing your identity or your friends to the site)
  - sans-serif 15y ago
    > I always thought you had to do the whole facebook connect crap before websites could just splash your fb friends list at you? No, you're wrong. > Someone was petrified that fb knows and may have already revealed Based on that someone's own mistaken idea. > How long is until you'll be able to 'connect' to the DMV via fb? Then just quit when that happens? Or don't let people post to your wall? Or don't friend strangers? Sorry, but these aren't rocket science and they in no way resemble an "abuse".

haldean 15y ago

Pretty much any of it. If there's a photo I want a friend of mine to see, but they don't have permission to see it, I just send them the URL of the static content and it works every time, whether or not they're logged in.

rw 15y ago
No longer. Images are obfuscated (view the source of a gallery image to see what I mean).
- X-Istence 15y ago
  So you are not able to view the following link: https://fbcdn-sphotos-a.akamaihd.net/hphotos-ak-snc4/148199_509098132490_138900699_30219016_5205632_n.jpg https://fbcdn-sphotos-a.akamaihd.net/hphotos-ak-snc4/148199_... Just for reference the picture should be this: http://imgur.com/UYs6H http://imgur.com/UYs6H Oh ... the way I uploaded that to imgur? Using that URL above, so clearly that is wide open to the world.
  - thamer 15y ago
    Bert, your facebook profile ID is in that URL (the number starting with 1389...). Also, there is no restriction on who can see pictures when you a direct link to an image. This is mostly due to the fact that CDNs used to store static files usually don't send cookies and thus have no concept of a session.
    - X-Istence 15y ago
      My personal portfolio site is listed in my HackerNews profile, on my portfolio site I have a link to my Facebook profile (so that people I give my business card to are able to more easily find me, and not my dad). I am familiar with what is in the URL, and I am also familiar with CDN's. I was merely posting my rebuttal to the OP who said it was obfuscated.
- jonknee 15y ago
  Not at all, they now even give you a link to download the image. You can share this publicly. Or just right click and choose "Copy Image URL". I viewed source and it's a standard container div setup, nothing obfuscated about it. The image URLs are all right there.
  - rw 15y ago
    Thanks for the correction--I got so used to being treated adversarily by FB that I failed to look for a link like that :-)

sans-serif 15y ago

That's it? So if I rationally weigh my cost of having to watch where I click and find it to be significantly less than the benefits from hanging out with friends online, I'm a victim of an "abuse"? It's a sad day for HN when thoughtful discussions have been replaced by such obvious sensationalism nonsense. We can compile kernels but Facebook's super-complex privacy settings reduce us to wimps.

watmough 15y ago
Here's the text I was thinking of when I wrote that: "So I was scared shitless when after RSVP'ing I see faces of all my facebook friends and an offer to invite them. I always thought you had to do the whole facebook connect crap before websites could just splash your fb friends list at you?" Someone was petrified that fb knows and may have already revealed something that person really wants to keep private. Sounds fairly abusive to me. How long is until you'll be able to 'connect' to the DMV via fb? What if you're a serial scofflaw, and have a trail of unpaid speeding tickets. We already have instances of debt collectors attacking fb profiles. What if state agencies try to get in on this act?
- yuliyp 15y ago
  Watmough, you have to opt in to a site in order for that site to be able to access your information. However, social plugins allow your information to appear inside iframes on third-party sites (without revealing your identity or your friends to the site)
- sans-serif 15y ago
  > I always thought you had to do the whole facebook connect crap before websites could just splash your fb friends list at you? No, you're wrong. > Someone was petrified that fb knows and may have already revealed Based on that someone's own mistaken idea. > How long is until you'll be able to 'connect' to the DMV via fb? Then just quit when that happens? Or don't let people post to your wall? Or don't friend strangers? Sorry, but these aren't rocket science and they in no way resemble an "abuse".