I witnessed an interesting attack today. Someone was able to register a new Facebook account with the email address of a friend of mine. We don't know how it happened, because Facebook requires you to click on a confirmation link to use an email address. Maybe the attacker got access to the mailbox somehow.
The interesting question for me is, why would someone do this? It is easy to create a free email address within minutes. Why does the attacker use the email address of someone else? It is no impersonation scenario, because the Facebook account has a totally different name than my friend. I cannot think of a reasonable scenario that makes stealing an email address for creating a Facebook account worth the effort. Am I missing something?
Update: First of all, no one from Facebook responded to our abuse message. Nevertheless the fake account was gone after several days - we have no idea if Facebook took active measures against this account or not.
I didn't think about the obvious counter measure against this fake account when the incident happened but this idea might be interesting to others facing a similar problem. If someone registers an account with your email address, there's nothing easier than resetting the password of this account and access/delete it - you are the owner of the email address bound to the account and the "lost password" function plays into your hands. I am not sure if this would be 100% legal though - depends on the question if the account is actually yours, if your email address is bound to it.
Since we can assume the attacker probably had access to his email, he probably had access to his address-book as well and he could have requested friendship (search for friends by email address) from all the people that had a facebook account registered to one of the email addresses from that address-book (some of those requests would succeed). Despite having a different name (lots of people don't use their real names on facebook), lots of people would accept the invite either blindly or since they would see they had friends in common (the ones that accepted blindly). After that, he would have access to additional data about all that other people, etc..
I would do that if I wanted to stay completely anonymous. Fake data or stolen data isn't yours, since you can't register without providing some data about yourself, try to use a fake or stolen email address.
To enable sign-in for users with a Facebook account in Azure Active Directory B2C (Azure AD B2C), you need to create an application in Facebook App Dashboard. For more information, see App Development.
If you don't already have a Facebook account, sign up at After you sign-up or sign-in with your Facebook account, start the Facebook developer account registration process. For more information, see Register as a Facebook Developer.
I applied for a job I was intrested in few days ago and today the client sent me a message saying that I should register on their website to take some tests (which is fine to me), but also that they are screening their candidates through their facebook account, so I should have my friends' list set to public.
On their website they say: "In order to prevent against spam accounts, we use Facebook as a tool to verify you are a real person. We promise to only use this information to verify your identity, and never to access your account or post on your page."
Even if my account is locked down (which it is), you can still see when I changed my profile picture throughout the years. My Facebook account is years old, so that should be good enough. Plus Upwork does it's own verification.
For those who have Facebook accounts, there are many benefits to using your Facebook credentials when signing up for Messenger. People can easily message with their Facebook friends and contacts, access their Facebook messages and take advantage of multi-device messaging across mobile devices, the web and tablets.
I am using django-allauth and dj-rest-auth in my django-rest project to register users and allow them to sign in to my react-native app. The problem I am having is that when the user is registered, it creates the particular user in a social accounts table. However, I want to also create a user profile for each member who registers via Facebook and store additional data (name, email, picture). I have had a look at docs, blogs, stack-overflow but just can't seem to figure out how I can do this.
5% of invalid address may sounds big, but if I check my facebook friends, I think more than 5% of them never use their account, and I wouldn't be surprised if the address they used when they signed in is now invalid.
It is not mandatory for someone to give their email address while signing up with Facebook. An alternate approach would be to ask the user to link their email id in the Facebook account settings. That way you can fetch the email id, if that's a mandatory field in your DB. Otherwise you can continue with the id provided by FB which is unique.
Have you thought about creating a Facebook account? Maybe you haven't decided to join this social network yet, but you're curious. Or maybe you're looking to create a Facebook Business page? Or perhaps you already use it regularly but want to know how you can further customize your account and better configure your privacy settings.
The first thing you'll need to do to create a Facebook account is to install the Facebook application on your cell phone. To do this, go to the corresponding app store (App Store for iPhones and Google Play for Android phones), find the Facebook application and download it.
If you have followed the steps above, you have already managed to create your own Facebook account. Welcome! Let's see how to use this social network and take advantage of the different options it offers.
Your Facebook account is like an online letter of introduction, which serves as a way for other users to find you. That's why, after creating your account, the next thing you need to do is to personalize it.
If your camera is unable to capture the QR code, you can manually add your account information to the Microsoft Authenticator app for two-factor verification. This works for work or school accounts and non-Microsoft accounts.
The Accounts screen of the app shows you your account name and a verification code. For additional security, the verification code changes every 30 seconds preventing someone from using a code multiple times.
Open the Authenticator app, select Add account from the Customize and control icon in the upper-right, select Other account (Google, Facebook, etc.), and then select OR ENTER CODE MANUALLY.
The Accounts screen of the app shows you your account name and a verification code. For additional security, the verification code changes every 30 seconds preventing someone from using a code multiple times.
On the Add a backup verification method page on your computer, type the verification code provided by your backup verification method for your Amazon account, and then select Verify code and continue.
If you're having trouble getting your verification code for your personal Microsoft account, see the Troubleshooting verification code issues section of the Microsoft account security info & verification codes article.
For devices running iOS, you can also back up your account credentials and related app settings, such as the order of your accounts, to the cloud. For more information, see Backup and recover with the Microsoft Authenticator app.
Some days ago I've been logged out from my account and now when I try to login with Facebook I get the error message "Ops, qualcosa è andato storto. Riprova più tardi o consulta l'area di assistenza" (translation from italian: "Ops, something went wrong. Try later or see the support area").
Official Monthly active users (MAUs) definition: Monthly active users or MAUs is defined as a registered and logged-in user to Facebook who visits the site through a mobile device application or web browser in the last 30 days as of the date of measurement.
Official Daily active users (DAUs) definition: Daily active users or DAUs is defined as a registered and logged-in user to Facebook who visits the site through a mobile device application or web browser on any given day.
Now that you have your shell Facebook account, you can set up your Messenger. Download the Facebook Messenger app to your Android or iOS device. Open the app. Tap the Create new account button and sign up using your name and the phone number you used for your Facebook account.
On Thursday, Bloomberg reported that Meta (Facebook's parent company) would begin experimenting with letting some Facebook users generate up to four other profiles in addition to their main account's profile.
Nextend Social Login seamlessly integrates with your existing WordPress login and registration form. Existing users can add or remove their social accounts at their WordPress profile page. A single user can attach as many social account as they want allowing them to log in with Facebook, Google or X (formerly Twitter).
Providers are the services which the visitors can use to register and log in to your site. Nextend Social Login allows your visitors to log in with their account from the most popular social networks: Facebook, Google and X (formerly Twitter).
aa06259810