Has anyone been using facebook lite? It is very interesting and I have been trying my hand at attempting to check out photos on a private profile, but with a visible album. The url for viewing photos in the lite version is definitely different:
http://lite.facebook.com/p/name1-name2/profileID/photos/album-name/yyyyyyyyyyyyy/ -->same as the y's below
And I am no guru here nor do I pretend to be one. But it may open some windows.
I have had a lot of time on my hands recently and was reading through some of the old forums on here. I used to be able to view photos from one of my targets and the one day, they went away. I grabbed the album id and photo ids, but not the actual file names. I now realize it to be that they changed their privacy settings for their albums. My other target has certain albums set to friends only and others that I can view. It is the only logical explanation. So what I have been doing is looking at the actual file name of the photos and realized there is somewhat of a pattern - kind of.
http://
photos-g.ak.fbcdn.net/hphotos-ak-snc1/hs
ttt.snc
V/
xxxx_
yyyyyyyyyyyyy_
zzzzzzzzzz_
111111_
2222222_n.jpg
you can ignore the stuff in orange which helps reduce the number of variables when fuskering.
knowing that:
zzzzzzzz - is the person's profile ID
1111111- the pic ID
Here has what I found through my own research:
ttt - this changes between 2 values
V - it is a set value for one person - may change between people
xxxx - if a person uploads photos at a certain time, this variable WILL remain the same NO MATTER what album the photo is put in
yyyyyyyyy - this variable will change by a set number.
I have a target who uploaded a whole bunch of photos on one day, but by looking at the picture id's I noticed that there were chunks missing. The picID went from xxxxx119-xxxxx145, so I assumed that there are possibly 26 photos that were put into a non-viewable (to me) album. For the picture file names that I could find before the gap I looked at the yyyy value and determined that the difference between EACH file I could view was 4990. On a separate test, the difference was 40,001 - but it went up consistently that amount between single picID's.
the 222222's - I HAVE NO FREAKIN' clue...anyone? ? ? it is just all over the place.
But at least, that is the only variable needed to fusker for one particular days worth of uploads!
And maybe I should have started out asking this first...Please let me know if I have this correct:
you can fusker the facebook url like this one:
http://www.facebook.com/photo.php?pid=[xxxxxx]&id=xxxxxxxxxx but you won't get anything that you can't already view, even if you KNOW for a fact that there are photos out there.
and if you use the file name - will you be able to view the photo regardless of privacy settings?
One other thing, if you are looking at your photos on facebook, there is a link to "share this photo with anyone by sending them this puclic link" - has anyone looked at that as far as kraq-ing that?? Just curious
I hope this isn't just a bunch of crap that doesn't make sense, but it makes sense to me, and I hope that it helps someone out!
