Re:Breaking GitHub Private Pages for $35k
by montenegrohugo on Tuesday April 06, 2021 @08:58AM
(#26711216)
Just to clarify: you exploited said hole to access private photos of other people without their consent or knowledge?
[ Parent
| on HN ]
What agreement they had with facebook I am unaware of. But facebook seemed to treat them as public.
Facebook and access have always been confusing and this is setup on purpose. Some photos show up in feeds some are available to other group members. Photos you think are private are private until someone else you know is tagged in them.