[tptacek]

It's not a "loophole"; it's a critical vulnerability in their API server. It doesn't just affect Zuckerberg.

[kirbman89]

I think the point is that FB did nothing until it hit close to home and was embarrassing to their brand.