An unpatched flaw in the way Facebook handles account privacy allows users to change their names from people they have previously blocked. Facebook says it will not be offering a bug bounty and will not change the site’s privacy settings to prevent the leakage of users new identities to people they believed they had blocked. It is a serious legal and financial liability for Facebook worldwide considering new privacy laws being implemented globally, says researcher David Mathews. Facebook has said blocking someone’s account will not limit their access to their chat logs.”]

