4 ms·

The author clearly has access to the email account associated with the account. I don't see why they demand identification when they can just send a verificatio

The author clearly has access to the email account associated with the account. I don't see why they demand identification when they can just send a verification email, like literally every other website. What facebook is doing would make sense for a bank. They're not a bank. I know they think they are super duper important, but they're just another website that has no business demanding anyone's ID. Can you imagine the chaos once they get hacked and their ID database leaks?

crottypeter 10y ago
For many third-party websites your facebook account is your identity, i.e. they are super duper important.
- csydas 10y ago
  This is primarily why I'm a little torn about the "just send an auth" - Facebook, whether we like it or not, has wedged itself into a huge number of websites far beyond just the facebook domain. Surrendering control of a facebook account doesn't just let you mess with someone's social profile, it's potentially access to store accounts and much more. Whether or not people should be doing this is sort of irrelevant as the damage is already done and the situation is already entangled in Facebook's federated login.
- tokenizerrr 10y ago
  Which in turn is just delegated to an email address + password combination. If the user controls that email, they obviously should control the facebook account, and everything else connected to it.
- Sir_Substance 10y ago
  >For many third-party websites your facebook account is your identity, i.e. they are super duper important. Correction, for many third party websites a facebook account is /an/ identity. If you closed your facebook account, what are the odds you're going to be using it as your openID login all over the place? Probably none.
  - crottypeter 10y ago
    I think you underestimate the human ability to forget. Lots of people will decide to close their facebook account without thinking through the consequences (like that they used it to authenticate a dozen places).
  - nommm-nommm 10y ago
    When I was 20 I'd tend to agree with you. Now well into my 30s I don't. I don't remember a ton of stuff anymore you think I would, including signing up for services. Plus you have to trust the user thinks everything through and associates "I don't want Facebook anymore for its primary purpose" with "I use Facebook for other things too."
ceejayoz 10y ago
> The author clearly has access to the email account associated with the account. I don't see why they demand identification when they can just send a verification email, like literally every other website. Having lost a domain with email tied to it before (renewal came up during a long, low-tech vacation) I'm glad they're a little more careful than that.

crottypeter 10y ago

For many third-party websites your facebook account is your identity, i.e. they are super duper important.

csydas 10y ago
This is primarily why I'm a little torn about the "just send an auth" - Facebook, whether we like it or not, has wedged itself into a huge number of websites far beyond just the facebook domain. Surrendering control of a facebook account doesn't just let you mess with someone's social profile, it's potentially access to store accounts and much more. Whether or not people should be doing this is sort of irrelevant as the damage is already done and the situation is already entangled in Facebook's federated login.
tokenizerrr 10y ago
Which in turn is just delegated to an email address + password combination. If the user controls that email, they obviously should control the facebook account, and everything else connected to it.
Sir_Substance 10y ago
>For many third-party websites your facebook account is your identity, i.e. they are super duper important. Correction, for many third party websites a facebook account is /an/ identity. If you closed your facebook account, what are the odds you're going to be using it as your openID login all over the place? Probably none.
- crottypeter 10y ago
  I think you underestimate the human ability to forget. Lots of people will decide to close their facebook account without thinking through the consequences (like that they used it to authenticate a dozen places).
- nommm-nommm 10y ago
  When I was 20 I'd tend to agree with you. Now well into my 30s I don't. I don't remember a ton of stuff anymore you think I would, including signing up for services. Plus you have to trust the user thinks everything through and associates "I don't want Facebook anymore for its primary purpose" with "I use Facebook for other things too."

ceejayoz 10y ago

> The author clearly has access to the email account associated with the account. I don't see why they demand identification when they can just send a verification email, like literally every other website. Having lost a domain with email tied to it before (renewal came up during a long, low-tech vacation) I'm glad they're a little more careful than that.