[SilasX]

So, they're spewing login credentials all throughout users' emails? How is their security team okay with this?

Do they require that it be from a previously used IP/user-agent or something?

[walterbell]

Works with a VPN, so not linked to IP. URL includes email used for FB auth.

Edit: received FB email about "login from unknown device".