According to Zweerink, the web app is a proof of concept that the social network is „broken“ when it comes to user privacy. Once you have it up and running and even if a user has privacy options set to „nobody,“ the program lets you track status, check out profile photos, mess with privacy settings and see status messages.

The social networking site, owned by Facebook, boasts more than 700 million users. The security flaw comes just months after WhatsApp introduced improvements to its security measures.