Typical Facebook. Push out a major privacy flaw, then back-tread and play damage control.