Facebook Graph API robots.txt

I started playing with this new api today. My room mate and I spent an hour with various privacy settings and it does not appear there is any way to prevent your account from being accessed via this.

ryanjmo• 16 years ago

That is because the info that is available at http://graph.facebook.com/name is <= the info that is available at http://facebook.com/name . What part of your account are you trying to stop from being accessed? This makes no sense.

thamer• 16 years ago

My “graph” link is public, but my “public page” link is not. It might be because I don’t allow my profile to appear in public searches (non logged in), but still they made it visible to anyone in the graph API. I hope they add a privacy setting to change this.

geuis2• 16 years ago

I don't like the fact that Facebook makes any of my data available and doesn't provide me options to make it private at will. I have my privacy settings turned all the way up for everything. Perhaps I, and others, simply would like to not have any of our data available in this manner.

davetufts2• 16 years ago

I set my profile to private. I turned off "Public Search Results" and "Facebook Search Results" is set to "Only Friends".

If you're not logged in, my URL returns a 404: http://www.facebook.com/davetufts (or by ID: http://www.facebook.com/profile.php?id=603069147 )

Not a huge deal, because the graph page only shows my name and ID, but they are publicly accessible: http://graph.facebook.com/davetufts or http://graph.facebook.com/603069147

veemjeem• 16 years ago

So you're able to get someone's facebook id and name? How useful is that? It seems about as useful as scraping web pages for random names & numbers. Might as well go to classmates.com and get a list of names there.

jiaaro• 16 years ago

name, id, AND full size profile picture

oscardelben3• 16 years ago

What's interesting is that you can put the id in the url and get their data (example: http://graph.facebook.com/677195182).

I'm not entirely sure about what you could do with this data, but it's there, for anyone to see.

dasrecht• 16 years ago

so your name will be published out to the web?

you can set the userid as parameter and you get Mark Zuckerbergs Profile here : http://graph.facebook.com/4

Then you can simple count up to infinite to get the other profiles. The API has a Usage limit and blocks after a while

knorby• 16 years ago

Much more than users apparently. It looks like everyting is thrown in here:

http://developers.facebook.com/docs/api

tfh2• 16 years ago

Anyone knows why they are skipping IDs? Why didn't he pick id=1?

oscardelben3• 16 years ago

Perhaps those were just tests, and databases use incremental index but don't care if you delete a record.

gojomo• 16 years ago

Winklevoss, Winklevoss, and Narendra? :)

aplari• 16 years ago

also: http://graph.facebook.com/4/picture?type=large

thedjpetersen• 16 years ago

It will be interested if anyone ever does a dump of all the data availible

oscardelben3• 16 years ago

I just realized that if you supply an access token you have access to even more information for record.

CoryMathews• 16 years ago

Seems that its only more info based on your account. Unless Im missing something.

jyothi• 16 years ago

So bots get some non-standard file for robots.txt.

Guess no one at facebook has noticed the vulnerability exposed with pretty usernames on facebook & ignoring "." in a different framework. (probably just following gmail usernames.)

tszming• 16 years ago

http://graph.facebook.com/laden

{ "error": { "type": "QueryParseException", "message": "Some of the aliases you requested do not exist: laden" } }

Facebook Graph API robots.txt

Related Stories