[deadelvis]

Agree that the ability to access a user's friend's data (without said friend's permission) through the API, was a deliberate feature (not an abuse as it has been portraied) and is the interesting bit about this. Facebook deliberately abused user's privacy by deciding to monetize that feature. Only later decided to roll it back.