Yet another Facebook privacy flaw, this one allowing an attacker to change any other user’s privacy settings or profile information.
Facebook said it was “not aware of any cases in which it was used maliciously”, which is weasel-speak for “everyone who used it to change their ex-girlfriend’s interests to ‘being a dirty whore’ was j/k, so no worries.”