When a user sets a profile picture, even if it is in a private album, that specific image is often publicly viewable in low resolution (thumbnails for comments/messenger). Some scripts automate the process of:
The script contains obfuscated code that: vedere foto private facebook greasemonkey