Sunday, June 14, 2009

Break Facebook Privacy of Private Album

Posted by Taha Ali Adil at Sunday, June 14, 2009

Allows anyone to access Facebook albums 
Exploit for your Web Browser to Access the Albums on Facebook

When you’re tagged in an album, Facebook adds the photo(s) to your collection of “Added by Others” photos. When you’re viewing one of these photos of your friend, you can see the album name and creator displayed under the photo. If the creator is your friend, the album name is a link, otherwise you are not supposed to have an access to the rest of the album



You can do that by going to a friend’s photos page. Open one of the “Added by Others” photos tagged by someone whom you aren’t friends with. Pay attention to the address of the page you are viewing and all of the php variables (evertything after the question mark). “pid=258755″ is the ID of the photo in question. The variable “subj=850305322″ tells Facebook the subject we are particularly looking for in the album. “&id=992303520″ is the member ID of the person who created the album. Ignore the other variables. Remove this variable altogether. If we simply tried to isolate the photo by defining only the “pid” variable, Facebook will return an error page that says you don’t have permission to view the page. For this to work, you have to leave the ID of the album owner on the end:

http://www.facebook.com/photo.php?pid=258755&op=2&view=all&subj=850305322&id=992303520

a

In order to prevent people who aren’t your friends from accessing your albums, others will lose the ability to view the photos you tagged your friend in.



Relate Keywords :
facebook privacy, exploit, facebook account hack, access album, view pictures, private albums, hidden albums, view facebook album

Bookmark this post with:

Labels: , ,  

3 comments:

Anonymous | July 27, 2010 at 9:18 PM  

In order to view private albums, best way is getting full access to the profile. It is actually easy if you stop trying to get your target friendship and focus on his/her friends. Why don't we view our target profile logged as a friend he/she already has accepted? This idea is full explained in
http://www.giraa2.com/2010/05/acceso-total-un-facebook-privado.html
(in spanish, but you can use google translator)

Unknown | September 1, 2010 at 2:21 AM  

I recommend trying www.socialkik.com to buy Facebook fans, they have been recommended by a lot of bloggers and they can both be trusted. Socialkik can actually add fans to your Facebook page without logging into your Facebook profile, so I guess they send out thousands of suggestions to people in their network until they get 1K, 2K, 5K, 10K or 100K of Facebook fans to join your page, which is totally fine with Facebook terms of use.

meaina | July 7, 2011 at 10:54 PM  

I think many social networking sites in the search engine but some most important site available like facebook, twitter, digg, stumble upon, Google buzz, linked in, delicious, etc. Socialkik.

Post a Comment

Subscribe to: Post Comments (Atom)