News for hackers. Stuff that matters.

A comment on Facebook Asking for Some New Users' Email Passwords. Parent comment

Re:Facebook Asking for Some New Users' Email Passwords by pbhjpbhj on Wednesday April 03, 2019 @07:42AM (#19562538)
Where's the greater RoI in this case, what shady shit were they doing once they gained access to users email passwords??
[ Parent | on HN ]
Re:Facebook Asking for Some New Users' Email Passwords by Spivak on Wednesday April 03, 2019 @09:12AM (#19563005)
Realistically, probably just logging into the email account once to prove ownership. Not dissimilar to how LDAP authentication works.

Is it a worst practice in our industry right now? Yep. Is it nefariously evil, probably not.

[ Parent | on HN ]
Re:Facebook Asking for Some New Users' Email Passwords by pbhjpbhj on Wednesday April 03, 2019 @10:05PM (#19568781)
The industry standard appears to be "click on a link in an email", I think that's what FB did for me. So the question still remains what the RoI is that makes getting users passwords better. The only answers I can give are very bad, I can't see a legitimate reason to change to do it that way.
[ Parent | on HN ]