<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Easily View Hidden Facebook Photo Albums</title>
	<atom:link href="http://theharmonyguy.com/2009/12/17/easily-view-hidden-facebook-photo-albums/feed/" rel="self" type="application/rss+xml" />
	<link>http://theharmonyguy.com/2009/12/17/easily-view-hidden-facebook-photo-albums/</link>
	<description>Investigating privacy and security issues in online social networking</description>
	<lastBuildDate>Thu, 09 Feb 2012 10:47:20 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=</generator>
	<item>
		<title>By: David</title>
		<link>http://theharmonyguy.com/2009/12/17/easily-view-hidden-facebook-photo-albums/comment-page-1/#comment-9683</link>
		<dc:creator>David</dc:creator>
		<pubDate>Mon, 15 Mar 2010 00:28:36 +0000</pubDate>
		<guid isPermaLink="false">http://theharmonyguy.com/?p=598#comment-9683</guid>
		<description>Thanks for this brilliant post! I hope you get that new code working for the other pages.

This code only seems to work if someones photo settings are set to &#039;&#039;friends of friends&#039;&#039; or something like that. So I was thinking, if this code is able to break through some of the facebook&#039;s privacy, wouldn&#039;t it be possible to create a code that could see all photos even if they&#039;re set to &#039;&#039;only friends&#039;&#039;?

I&#039;m not familiar with javascript but i&#039;m sure you can find a way!!</description>
		<content:encoded><![CDATA[<p>Thanks for this brilliant post! I hope you get that new code working for the other pages.</p>
<p>This code only seems to work if someones photo settings are set to &#8221;friends of friends&#8221; or something like that. So I was thinking, if this code is able to break through some of the facebook&#8217;s privacy, wouldn&#8217;t it be possible to create a code that could see all photos even if they&#8217;re set to &#8221;only friends&#8221;?</p>
<p>I&#8217;m not familiar with javascript but i&#8217;m sure you can find a way!!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: anonim</title>
		<link>http://theharmonyguy.com/2009/12/17/easily-view-hidden-facebook-photo-albums/comment-page-1/#comment-9630</link>
		<dc:creator>anonim</dc:creator>
		<pubDate>Thu, 11 Mar 2010 18:12:11 +0000</pubDate>
		<guid isPermaLink="false">http://theharmonyguy.com/?p=598#comment-9630</guid>
		<description>Anyway, thanks for the first trick. I&#039;ll step by and check if its been solved. I unfortunately can&#039;t help as this scripting is not something I&#039;m good at.</description>
		<content:encoded><![CDATA[<p>Anyway, thanks for the first trick. I&#8217;ll step by and check if its been solved. I unfortunately can&#8217;t help as this scripting is not something I&#8217;m good at.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: theharmonyguy</title>
		<link>http://theharmonyguy.com/2009/12/17/easily-view-hidden-facebook-photo-albums/comment-page-1/#comment-9621</link>
		<dc:creator>theharmonyguy</dc:creator>
		<pubDate>Thu, 11 Mar 2010 00:23:30 +0000</pubDate>
		<guid isPermaLink="false">http://theharmonyguy.com/?p=598#comment-9621</guid>
		<description>@anonim Now that you mention it, I can&#039;t get my updated code to work either! I&#039;m remembering now some of the issues I encountered when I first worked on this and why I didn&#039;t include a way to load the other pages... they definitely can be loaded, it&#039;ll just take a little more work for me to put it together in a nice bookmarklet.</description>
		<content:encoded><![CDATA[<p>@anonim Now that you mention it, I can&#8217;t get my updated code to work either! I&#8217;m remembering now some of the issues I encountered when I first worked on this and why I didn&#8217;t include a way to load the other pages&#8230; they definitely can be loaded, it&#8217;ll just take a little more work for me to put it together in a nice bookmarklet.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: anonim</title>
		<link>http://theharmonyguy.com/2009/12/17/easily-view-hidden-facebook-photo-albums/comment-page-1/#comment-9620</link>
		<dc:creator>anonim</dc:creator>
		<pubDate>Thu, 11 Mar 2010 00:05:44 +0000</pubDate>
		<guid isPermaLink="false">http://theharmonyguy.com/?p=598#comment-9620</guid>
		<description>Ok, works for one page, that is 5 albums. But those latest two codes do not work for me. Am I doing it right by clicking on &quot;properties&quot; of the bookmarked, then under &quot;location&quot; exchange the code with:

javascript:(function(){function y(){if(x.readyState==4){q=x.responseText.substring(9);p=eval(‘(‘+q+’)&#039;);document.getElementById(‘tab_canvas’).innerHTML=p.payload.tab_content;}}x=window.XMLHttpRequest?new window.XMLHttpRequest:(window.ActiveXObject?new ActiveXObject(“MSXML2.XMLHTTP”):null);x.onreadystatechange=y;x.open(‘GET’,&#039;http://www.facebook.com/ajax/profile/tab.php?id=’+ProfileURIController._profileId+’&amp;v=photos&amp;__a=1&amp;sb=5′,true);x.send();})()

I don&#039;t understand Java Script well.</description>
		<content:encoded><![CDATA[<p>Ok, works for one page, that is 5 albums. But those latest two codes do not work for me. Am I doing it right by clicking on &#8220;properties&#8221; of the bookmarked, then under &#8220;location&#8221; exchange the code with:</p>
<p>javascript:(function(){function y(){if(x.readyState==4){q=x.responseText.substring(9);p=eval(‘(‘+q+’)&#8217;);document.getElementById(‘tab_canvas’).innerHTML=p.payload.tab_content;}}x=window.XMLHttpRequest?new window.XMLHttpRequest:(window.ActiveXObject?new ActiveXObject(“MSXML2.XMLHTTP”):null);x.onreadystatechange=y;x.open(‘GET’,&#8217;<a href="http://www.facebook.com/ajax/profile/tab.php?id=’+ProfileURIController._profileId+’&#038;v=photos&#038;__a=1&#038;sb=5′,true" rel="nofollow">http://www.facebook.com/ajax/profile/tab.php?id=’+ProfileURIController._profileId+’&#038;v=photos&#038;__a=1&#038;sb=5′,true</a>);x.send();})()</p>
<p>I don&#8217;t understand Java Script well.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: theharmonyguy</title>
		<link>http://theharmonyguy.com/2009/12/17/easily-view-hidden-facebook-photo-albums/comment-page-1/#comment-9609</link>
		<dc:creator>theharmonyguy</dc:creator>
		<pubDate>Tue, 09 Mar 2010 23:55:46 +0000</pubDate>
		<guid isPermaLink="false">http://theharmonyguy.com/?p=598#comment-9609</guid>
		<description>@FacebookHater: I&#039;m not sure why I didn&#039;t think to adapt this bookmarklet with a GET request, as I&#039;d previously discussed the &quot;sb&quot; parameter... I think I may have had some trouble getting to work previously, but oh well. Excellent tip, but in my testing the JS still needs a bit more adaptation, like so:

javascript:(function(){function y(){if(x.readyState==4){q=x.responseText.substring(9);p=eval(&#039;(&#039;+q+&#039;)&#039;);document.getElementById(&#039;tab_canvas&#039;).innerHTML=p.payload.tab_content;}}x=window.XMLHttpRequest?new window.XMLHttpRequest:(window.ActiveXObject?new ActiveXObject(&quot;MSXML2.XMLHTTP&quot;):null);x.onreadystatechange=y;x.open(&#039;GET&#039;,&#039;http://www.facebook.com/ajax/profile/tab.php?id=&#039;+ProfileURIController._profileId+&#039;&amp;v=photos&amp;__a=1&amp;sb=5&#039;,true);x.send();})()

That one worked for me, and obviously one would simply increment the &quot;sb&quot; value for more albums.

@Tom: You need to right-click the link to bookmark it.

@ScorpionSX: If I had a way to override Facebook&#039;s privacy settings, I wouldn&#039;t simply publish it on my blog. :)</description>
		<content:encoded><![CDATA[<p>@FacebookHater: I&#8217;m not sure why I didn&#8217;t think to adapt this bookmarklet with a GET request, as I&#8217;d previously discussed the &#8220;sb&#8221; parameter&#8230; I think I may have had some trouble getting to work previously, but oh well. Excellent tip, but in my testing the JS still needs a bit more adaptation, like so:</p>
<p>javascript:(function(){function y(){if(x.readyState==4){q=x.responseText.substring(9);p=eval(&#8216;(&#8216;+q+&#8217;)');document.getElementById(&#8216;tab_canvas&#8217;).innerHTML=p.payload.tab_content;}}x=window.XMLHttpRequest?new window.XMLHttpRequest:(window.ActiveXObject?new ActiveXObject(&#8220;MSXML2.XMLHTTP&#8221;):null);x.onreadystatechange=y;x.open(&#8216;GET&#8217;,&#8217;<a href="http://www.facebook.com/ajax/profile/tab.php?id=&#039;+ProfileURIController._profileId+&#039;&#038;v=photos&#038;__a=1&#038;sb=5&#039;,true" rel="nofollow">http://www.facebook.com/ajax/profile/tab.php?id=&#039;+ProfileURIController._profileId+&#039;&#038;v=photos&#038;__a=1&#038;sb=5&#039;,true</a>);x.send();})()</p>
<p>That one worked for me, and obviously one would simply increment the &#8220;sb&#8221; value for more albums.</p>
<p>@Tom: You need to right-click the link to bookmark it.</p>
<p>@ScorpionSX: If I had a way to override Facebook&#8217;s privacy settings, I wouldn&#8217;t simply publish it on my blog. :)</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: FacebookHater</title>
		<link>http://theharmonyguy.com/2009/12/17/easily-view-hidden-facebook-photo-albums/comment-page-1/#comment-9588</link>
		<dc:creator>FacebookHater</dc:creator>
		<pubDate>Sun, 07 Mar 2010 12:30:22 +0000</pubDate>
		<guid isPermaLink="false">http://theharmonyguy.com/?p=598#comment-9588</guid>
		<description>@harmonyguy: It&#039;s easy to get the following pages of galleries. You just add the sb=... parameter. What is important is that it has to be submitted via GET not POST. In other words you have to adjust the JS for it. For the second page it would look like

javascript:(function(){function y(){if(x.readyState==4){q=x.responseText.substring(9);p=eval(‘(‘+q+’)&#039;);document.getElementById(‘tab_canvas’).innerHTML=p.payload.tab_content;}}x=window.XMLHttpRequest?new window.XMLHttpRequest:(window.ActiveXObject?new ActiveXObject(“MSXML2.XMLHTTP”):null);x.onreadystatechange=y;x.open(‘POST’,&#039;http://www.facebook.com/ajax/profile/tab.php?sb=5’,true);x.send(‘id=’+ProfileURIController._profileId+’&amp;v=photos&amp;__a=1′);})()</description>
		<content:encoded><![CDATA[<p>@harmonyguy: It&#8217;s easy to get the following pages of galleries. You just add the sb=&#8230; parameter. What is important is that it has to be submitted via GET not POST. In other words you have to adjust the JS for it. For the second page it would look like</p>
<p>javascript:(function(){function y(){if(x.readyState==4){q=x.responseText.substring(9);p=eval(‘(‘+q+’)&#8217;);document.getElementById(‘tab_canvas’).innerHTML=p.payload.tab_content;}}x=window.XMLHttpRequest?new window.XMLHttpRequest:(window.ActiveXObject?new ActiveXObject(“MSXML2.XMLHTTP”):null);x.onreadystatechange=y;x.open(‘POST’,&#8217;<a href="http://www.facebook.com/ajax/profile/tab.php?sb=5’,true);x.send(‘id=’+ProfileURIController._profileId+’&#038;v=photos&#038;__a=1′" rel="nofollow">http://www.facebook.com/ajax/profile/tab.php?sb=5’,true);x.send(‘id=’+ProfileURIController._profileId+’&#038;v=photos&#038;__a=1′</a>);})()</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: me</title>
		<link>http://theharmonyguy.com/2009/12/17/easily-view-hidden-facebook-photo-albums/comment-page-1/#comment-9518</link>
		<dc:creator>me</dc:creator>
		<pubDate>Fri, 26 Feb 2010 05:26:17 +0000</pubDate>
		<guid isPermaLink="false">http://theharmonyguy.com/?p=598#comment-9518</guid>
		<description>Does it only allow to see the first 3 ?</description>
		<content:encoded><![CDATA[<p>Does it only allow to see the first 3 ?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Hack foto pubbliche nei profili Facebook &#124; Nicola Moretti - Hanicker IT Blog</title>
		<link>http://theharmonyguy.com/2009/12/17/easily-view-hidden-facebook-photo-albums/comment-page-1/#comment-8896</link>
		<dc:creator>Hack foto pubbliche nei profili Facebook &#124; Nicola Moretti - Hanicker IT Blog</dc:creator>
		<pubDate>Fri, 29 Jan 2010 21:18:06 +0000</pubDate>
		<guid isPermaLink="false">http://theharmonyguy.com/?p=598#comment-8896</guid>
		<description>[...] Tratto da: theharmonyguy.com [...]</description>
		<content:encoded><![CDATA[<p>[...] Tratto da: theharmonyguy.com [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Tom</title>
		<link>http://theharmonyguy.com/2009/12/17/easily-view-hidden-facebook-photo-albums/comment-page-1/#comment-8569</link>
		<dc:creator>Tom</dc:creator>
		<pubDate>Tue, 19 Jan 2010 03:56:43 +0000</pubDate>
		<guid isPermaLink="false">http://theharmonyguy.com/?p=598#comment-8569</guid>
		<description>how do u bookmark the link? when I click on it nothnig hapapens</description>
		<content:encoded><![CDATA[<p>how do u bookmark the link? when I click on it nothnig hapapens</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Polyster</title>
		<link>http://theharmonyguy.com/2009/12/17/easily-view-hidden-facebook-photo-albums/comment-page-1/#comment-8497</link>
		<dc:creator>Polyster</dc:creator>
		<pubDate>Sat, 16 Jan 2010 16:37:24 +0000</pubDate>
		<guid isPermaLink="false">http://theharmonyguy.com/?p=598#comment-8497</guid>
		<description>It works! thanks man!</description>
		<content:encoded><![CDATA[<p>It works! thanks man!</p>
]]></content:encoded>
	</item>
</channel>
</rss>

