You're a private person. So, you make your facebook profile totally hidden. But then, you list that you enjoy watersports, grand larceny, and underage drinking, express interest in "random play" with "both men and women," and join a NAMBLA facebook group. For some reason, someone somewhere searches for those things or browses the NAMBLA group, and up pops your name and photo.

So they do a Cornell directory search, find out where you live, and proceed to burn down your apartment, which takes the life of your pet goldfish Smookums and destroys your stamp collection valued at 4,000 USD.

Whoops.

Apparently security researcher Christopher Soghoian announced this "flaw" on June 26th and discovered it in September of 2006. Um yeah. I discovered it in 2004. They should pay me.  But w/e.

Chris-boy contacted Facebook, who promptly ignored him... until wired.com got on the case.  Then Facebook peeps sent them this lovely message: "We have since updated the advanced search function so that profile information that has been made private by a user, such as gender, religion and sexual orientation, will not return a result."

But the watersports thing and the NAMBLA thing still works. *giggle*