Kittinan

As https://www.facebook.com/help/359369650815737 notes, the privacy
setting of an email address controls who is able to see the information
outside of the context of Timeline. Shown on Timeline or Hidden from
Timeline are known as visibility settings and only control what information
is highlighted on your timeline. Can you demonstrate the ability to use
this token to access email addresses which you shouldn't be able to based
on privacy settings?

The tokens issued to the official applications have special permissions in order to allow them to function as efficiently as possible. Again, the application should not be able to return any information that it is not possible to access normally. Can you demonstrate a case where you are seeing the friend list for a friend where you could not otherwise see it? 

From Facebook Android Application

From Facebook Messenger Application

5. After i got the special token i use facebook fql to get data (https://developers.facebook.com/tools/explorer)

i will show you for some example

this is the query to get your friends email & phone number
https://developers.facebook.com/tools/explorer/?fql=SELECT%20uid%2C%20name%2C%20email%2C%20phones%20FROM%20user%20WHERE%20uid%20IN%20(SELECT%20uid2%20FROM%20friend%20WHERE%20uid1%3Dme())

phones is not for regular facebook app token

After use the special token,  got email and phone number

this query can get your friends of friends depends on your friend privacy setting

SELECT uid, name, email, phones FROM user WHERE uid IN (SELECT uid2 FROM friend WHERE uid1=FACEBOOK_ID)

auto wlan0iface wlan0 inet staticaddress 192.168.0.21netmask 255.255.255.0gateway 192.168.0.1wpa-essid not-telling-youwpa-psk not-telling-you-this-either

sudo apt-get install audacity

adb shell pm list permissions -g