However, Cluley added that, rather than highlighting an issue with Facebook's
security in itself, the attack had displayed a lack of knowledge and awareness
among users, and is indicative of the way Facebook makes it difficult for users
to control their own accounts.
"Facebook has gradually eroded its users' privacy over the years in an
attempt to share more information with the rest of the internet," he said.
"The only information in the torrent file is the user's name and Facebook
URL. If they had also scooped up other information from the profiles (which is
publicly available) then that would clearly be more dangerous."
Cluley said he hoped the incident would prompt social network users to harden
their security settings.
"Facebook users need to wake up to the risks of sharing too much information
online, and examine their Facebook security settings closely to ensure that they
are not divulging too much to people they don't know."
The way that the apparent vulnerability was exposed and shared also drew
scorn from Cluley, who suggested that Bowes had acted irresponsibly.
Bowes said that he took and published the details to highlight the problems
people face using Facebook, but Cluley remained sceptical.
"In my view his collecting of this data, although not illegal, was
irresponsible, and I cannot imagine that he has done anything to make the
internet a more secure place through his actions," he said.
Do you agree?
Have your say on this article