He could easily take over a user's Facebook account if he so choose, considering that "breaking" the account is using a random string that you're supposed to fo

He could easily take over a user's Facebook account if he so choose, considering that "breaking" the account is using a random string that you're supposed to forget, which he then returns to you in plain text... That alone would probably warrant a close look at the site, notwithstanding the name issues.