Facebook now demands the password to your email-account, promises to keep it safe.

[DetlefK]

https://www.thedailybeast.com/beyond-sketchy-facebook-demanding-some-new-users-email-passwords?ref=home

Just two weeks after admitting it stored hundreds of millions of its users’ own passwords insecurely, Facebook is demanding some users fork over the password for their outside email account as the price of admission to the social network.

Facebook users are being interrupted by an interstitial demanding they provide the password for the email account they gave to Facebook when signing up. “To continue using Facebook, you’ll need to confirm your email,” the message demands. “Since you signed up with [email address], you can do that automatically …”

A form below the message asked for the users’ “email password.”

...

In a statement emailed to The Daily Beast after this story published, Facebook reiterated its claim it doesn’t store the email passwords. But the company also announced it will end the practice altogether.

...

Small print below the password field promises, “Facebook won’t store your password.” But the company has recently been criticized for repurposing information it originally acquired for “security” reasons.

Last year Facebook was caught allowing advertisers to target its users using phone numbers users provided for two-factor authentication; users handed over their numbers so Facebook could send a text message with a secret code when they log in. More recently the company drew the ire of privacy advocates when it began making those phone numbers searchable, so anyone can locate the matching user “in defiance of user expectations and security best practices,” wrote the Electronic Frontier Foundation, a civil liberties group.

Facebook also has a checkered history when it comes to securely handling passwords. Last month the company acknowledged that unencrypted passwords for hundreds of millions of its users had been stored for years in company logs accessible to 2,000 employees.

[LiberalFighter]

1. The hell with that.

[DownriverDem]

10. I'll just

give them the one I don't use if need be.

[tymorial]

2. Even more reason to dump that crap

[DontBooVote]

12. I dumped fb when the admitted taking rubles from russians in order to mind-fuck their members.

[phylny]

3. You can bypass it.

It's still awful that they asked.

[extvbroadcaster]

4. Facebook has long been a joke

Back in the day, a college e-mail was required. Hey, share your stuff with fellow students and mom and dad can't see! Wasn't that photo of you puking at the TKE party funny? Then everybody could join, people figured out that photos were forever on the web, their "friends" tended to change and the whole thing was creepy actually. Now it is nothing but "brag book" where people post their vacation photos and little Timmy's first steps. But that DWI mugshot? Nope. Do yourself a favor and get off it and forget it. Facebook's time has come and gone. Do you really want to hear from the guy that sat behind you in high school history?

[Girard442]

7. I once asked a friend of mine, a HS teacher, how a teacher deals with FB.

"Don't touch it with a ten-foot pole."

[Stellar]

5. What next, my social security number? nt

[Girard442]

6. But they use the password to log into your email account, right?

How else would they know it's the real password?

[Farmer-Rick]

9. I wonder what would happen if you gave them the wrong password?

Woud they come back and say, "Hey we tried that password and we couldn't open your e-mails. Please provide the correct password so we can read your private emails."

Or would they say, "Hey, we sold off your email address and password and the hackers are complaining the password is wrong. Gives us the right one or we will cut off your facebook account."

You just never know what a fanatically greedy con like Mark Zuckerberg might do.

[Tipperary]

15. I change all my passwords pretty regularly.

Easy to do.

[Farmer-Rick]

18. Yeah, so why not just give them a fake password?

[Tipperary]

20. No reason at all.

I am not on fb so i really do not have a dog in this fight.

[Farmer-Rick]

23. Yeah, me neither

I was just wondering out loud.

[fescuerescue]

27. Then the auto-verification process would fail

and you would be prompted again along with the option to manually confirm.

This is how it works. 1) Facebook sends a confirmation email to your account with a code. 2) Facebook logs into your email account, finds the referenced email and verifies the code matches what facebook sent. This process allows facebook to confirm that you control that email account.

Conversely, you can do it manually. 1) Facebook sends a confirmation email to your account with a code. 2) . YOU read your email and read the code. 3) You type code into facebook verification box.

Autoverification is just a bad idea. But Facebook is a bad ideal factory.

[Farmer-Rick]

38. So, they really do go into your email account

Wow. A perfect meeting of bad ideas.

[DinahMoeHum]

8. Reason no. 5379 I don't have a Facebook or Twitter account.

I don't swim in dirty water.

[DownriverDem]

11. I have both

That's how I know so many new folks that lean left! We are a great group.

[malaise]

32. Ditto n/t

[forgotmylogin]

13. I'd been considering deleting my Facebook account for a long time.

I finally pulled the trigger last month, and am still in my "Are you sure?" period before they actually delete stuff.

[KelleyKramer]

14. Sure no problem, password is.. FB-go-fuck-yourself

And a handy tip... the FB data mining employee needs to manually type that in three times before it will work

[pangaia]

16. "...criticized for repurposing information it originally acquired for "security" reasons. "

"""repurposing""""

Oh, like turning old things into new different things...??

[Girard442]

24. What's the problem Mr. Store Security Dude?

I was just repurposing these things for personal use.

[Farmer-Rick]

39. Yeah, like selling your personal information to hackers

Repurposing even more profits for their scam.

[dalton99a]

17. Fuck Mark Zuckerberg

What a goddamn creep. His greed knows no bounds

[PJMcK]

19. Yet another reason Facebook sucks

It's really a very dangerous thing.

[Roy Rolling]

21. "I trust them"

They bring me the truth NBC is afraid to print----says every Trumpanista in America.

We thought Fox News was bad until Facebook news sharing came along.

How do right-wing propagandists collect enough advertising money to exist? What businesses pay them to exist and spew bullshit?

[yuiyoshida]

22. I left FB a long time ago but must admit

that it was difficult. They made it difficult to leave, giving you three months to ignore your account once you decided to leave. I prefer Twitter these days...easier and they don't expose your personal information to the world.

[Skinner]

25. A company without a moral compass.

The fact that this idea wasn't immediately shot down when some imbecile at the company suggested it is deeply disturbing.

[DFW]

26. That sounds like one way to whittle down their membership to a manageable number.

Like about seventy users.

[toddwv]

28. Incredibly stupid for them to do this.

[CentralMass]

29. This doesn't sound right. I have not and would never give my email password out .

I have an FB account and don't even give them my phone#

[ScratchCat]

33. Yeh, I've read the thread

and all the responses but this seems like a "phishing" scam that people picked up as a cookie or whatever at other websites. It would make no sense that FB would ask for this.

[Skinner]

37. That would be my assumption as well. EXCEPT...

...my understanding is that the Daily Beast is a reputable news site. And the article includes a response from Facebook itself:

“We understand the password verification option isn’t the best way to go about this, so we are going to stop offering it,” Facebook wrote.

So yeah, this seems too insane even for facebook. But it does appear to be a legit article from a legit site. (And in case anyone is wondering the date on the article is April 2, not April 1.)

[RocRizzo55]

30. They never asked for mine.

And they will never get the one that I read all the time if they do.
It was probably a phishing scheme any way.

[Greybnk48]

31. I've never been asked for mine and I pop

in there every day.

[bluedigger]

34. I use my gmail account to log in to FB.

Haven't actually logged in to gmail in nearly a year.

[cwydro]

35. I'm on Facebook. Never been asked that.

[11 Bravo]

40. Never been on Facebook, but I'm thinking of signing up ...

just so I can tell them to take a flying fuck at a rolling donut if they ask for my email passwords.