The first Google+ privacy flaw