Of course, I understand that perfectly well. What I have a problem with is that they gave users a tool to manage and hide certain connections, even though anyo

Of course, I understand that perfectly well. What I have a problem with is that they gave users a tool to manage and hide certain connections, even though anyone could potentially circumvent that. My position is that the service should work as expected. Either you give your users the means to hide connections, and consequently prevent hacks like this, or you remove that feature and every user will know that this information is public to all your friends. Everything in between is just wrong, because it breaks your users expectations, you've got to be clear about what your service does. Also, I want to be clear that I don't think that Facebook is intentionally doing something evil, it's just a big corporation with lots of different people making decisions. That could happen anywhere.