Facebook security hole: How to post to pending friends’ profilesPieter posted in "Privacy & security". 7 years, 5 months ago
Facebook application developers, Candytech, have discovered a security hole, or rather privacy issue, with the status tagging feature that was introduced in September. After launching the feature, Facebook updated the “Friends” section to show friends pending a confirmation, “but probably without noticing the integrity, Facebook implemented this also in the [status tagging] feature” which means you can mention non-friends and post to their profiles if a friend request is pending. You can’t do it straight from your profile, but you will just need a Facebook Page.
For further information and an example, check out the full post over at Facebakers.