Facebook bug let apps access unposted photos for millions of users
 

Facebook has disclosed yet another privacy flub. This time around, it says a bug in the Photo API led to third-party apps being able to access not only timeline photos (which users had permitted them to do), but Stories, Marketplace images and photos...

https://www.engadget.com/2018/12/14/...s-marketplace/