Facebook and Twitter social media API security

Julian Evans wondered for some time whether it might be possible to develop a security app for Facebook, that provides protection at levels similar to Internet security suites. Julian's research has concluded that providing a scanning, tracking and notification based AV type system is very difficult to deploy due to restrictions in the Facebook and Twitter APIs. There are several Facebook apps that scan messages, posts, emails etc but chat conversations and external ‘likes’ (JavaScript threats anyone?) cannot be scanned by means of the Facebook Graph API. Read on...