Facebook dumped a Harvard intern after he exposed a privacy flaw