A team of programmers working for the BBC's 'Click' programme have found a flaw in Facebook security which could potentially mean users personal details are at risk. In under 3 hours the team had written an application to harvest details from users.
The application was also able to get details of the target user's friends. Details included date of birth, address and contact number. No-one is able to say if criminals are exploiting this type of application for identity theft.
To access someone's data an application must first be added, it is then able to grab data from friends of the person who added it as well. To protect themselves a user must block the application. Such applications break Facebook terms and conditions.