Facebook was hoping to allow users to write special messages to be sent at midnight tonight, but a student in Wales discovered a small problem: It's way easy to read—or delete—other people's private notes, the Daily Mail reports. Tweaking the URL of a message sent via the "Midnight Message Delivery" service, released last week, lets a user peep on any message. "Facebook have not been very security conscious when setting this up," the student wrote on his blog. The company has now taken down the service and is "working on a fix," says a rep. Until then, an old-fashioned text may have to do. (More Facebook stories.)