Because she learned the truth about viewing Facebook profiles without an account: you can’t see what people want to hide. You can only see what they forgot they ever showed. And in those forgotten corners, entire lives are won or lost.
But the real trick was the “friend graph remnant.” When two people had once been friends, and one deleted their account, Facebook scrubbed the data—but not the timestamp of the friendship . By cross-referencing timestamps with public events, you could deduce where someone was on a given night.
She saw his profile picture history: a beach in Thailand last month. A bar in Chicago last week. Then, a gas station two blocks from Lena’s new apartment, timestamped three days ago. The JSON showed he had been tagged in a comment by a stranger: “Great seeing you at the 24-hour diner on 5th!” That diner was across the street from Lena’s workplace.
In the digital underbelly of the internet, where broken firewalls hummed and forgotten code gathered dust, lived a woman named Mira.
The story of The Glass Key spread through domestic violence shelters, investigative journalists, and paranoid exiles from social media. But it also spread to people with darker intentions. Within a month, someone used it to track a witness in a criminal trial.
Mira hesitated. The obvious tools—fake accounts, friend requests from strangers—were clumsy and left digital fingerprints. But she remembered something buried deep in Echo’s archives: a forgotten Facebook API endpoint from 2015, before Graph API v2.0 locked everything down. Back when the internet believed in openness.
Mira fed Lena’s ex his old email address from 2014. The Glass Key spat out his numeric ID. Then, the magic began.