photo_comments.php

Update!! Facebook patched it! gosh that was quicker than I expected. the hack no longer works on people with private profiles. there’s nothing that will work at the moment, but if anything should come up in the future… i might not consider posting it on the net haha! In case anyone is wondering, from what i can tell it took around 11 hours from the time i posted this to when the hole was patched.

The original post follows:

———–

So here it is.

First you need the person’s facebook ID and you can get that from the ‘Add as Friend’ Button. Then type this in your browser address:

http://www.facebook.com/photo_comments.php?id=[IDNUMBER]

you’ll then get a list of all the photos that that person has in public albums which have comments on. Upon clicking on one of the pictures, you can then access the whole of that album by using the Prev | Next navigation buttons or by using this greasemonkey script to see the whole album on one page http://userscripts.org/scripts/show/9580

Remember, this only works if the user has not set any privacy settings on their albums. Also remember that their friends are also likely to have pictures of them so use the url manipulation on them too and see what you can find.

P.s. There is no greasemonkey script because i couldn’t be bothered to make one