A security researcher found a way to find out *any* Facebook user’s primary email address, regardless of their privacy settings.