One of the big security stories of last month was that Facebook changed their privacy tools to give users more control. One of the main changes was that users could, when posting an item, use granular control over who could see it, down to the point of specifying users who can and can't. Click the nearby image for a full-size example of the Custom Privacy dialog box. But now F-Secure shows that private items are, at least in some cases, public.