Hackers can delete Facebook friends, thanks to flaw