"There was an inconsistency between the Web and mobile versions of the site for the friend list visibility option," Facebook spokesman Simon Axten said in an e-mail.
"Remember that with the privacy changes we made back in December, your friend list is now publicly available information," he said. "You can't shut off access to it completely, but you can hide it from your profile for non-friends. This visibility setting is what wasn't working on the mobile site."
CNET notified Facebook about the issue on Tuesday.
Elinor Mills covers Internet security and privacy. She joined CNET News
in 2005 after working as a foreign correspondent for Reuters in
Portugal and writing for The Industry Standard, the IDG News Service,
and the Associated Press. E-mail Elinor. 
- Recent posts from InSecurity Complex
- Router glitch cripples California DMV network
- Facebook plugs friends list mobile leak
- Microsoft fixes 8 IE holes, including one used in attacks
- Microsoft warns of flaw in 32-bit Windows kernel
- Apple fixes a dozen holes in Mac OS X
- Microsoft to release patch for IE hole on Thursday
- Using Twitter to help Haiti
- Google's spy case: Not the first, nor the last