&gt; How did it get his photos? Well, he has friends who signed up with Facebook. View scans its user’s Facebook friends for other students, and creates fake View profiles<p>I thought the Facebook API does not allow pulling the complete friends list anymore. i.e. it excludes those friends that do not already have the corresponding Facebook app installed, precisely to stop this tactic?