A user on a bodybuilding forum has posted what he says are instructions for successfully working around a Facebook user's privacy settings, enabling anyone to view someone's private photos. It's a simple process, and it appears to work. Apparently someone decided to punish Facebook founder Mark Zuckerberg for this privacy breach by using the hack to swipe his private photos, posting them online, accessible to all.
Time to fix that glitch, Facebook. (UPDATE: They fixed it.)