Deanonymizing Facebook Users By CSP Bruteforcing

Did you ever wish to have all relevant information about a visitor right when he hits your site? Think of (full) name, gender and maybe hobbies and interests? Thanks to social networks we could at least get some of that data. All you need is the URL to that visitors (public) Facebook or Google+ profile – but if he doesn’t actively give it to you, you’re probably out of luck.

What if we could get that profile URL without the user even noticing it?

more here............http://www.myseosolution.de/deanonymizing-facebook-users-by-csp-bruteforcing/