From the article: We have identified this bug and closed the loophole. We don’t have any evidence to suggest that it was ever exploited for malicious purposes.

From the article: We have identified this bug and closed the loophole. We don’t have any evidence to suggest that it was ever exploited for malicious purposes. Yeah, it's not like Facebook already solved the problem. It's fun thinking of them as utter incompetents who don't spend years executing very subtle redesigns without alienating their hundred million users, because they haven't been radically changing the site since it first launched.