[teeray]

I had a friend get her account hacked, and it’s mystifying why Facebook won’t leverage the friend graph to restore access. If Facebook was like: go collect these restoration tokens from these people and we’ll give you your account back, that would be awesome.

[wylieeden]

That's a good idea too. When I lost my FB account due to hacking I had my mom and my sister reach out on my behalf. But the hackers were posting some bad stuff apparently and the account was terminated pretty quickly. If I could have used the biometrics/hardware combo I detail in the paper to self-suspend and then reverify the account, it would have limited the damage to my rep and the platform's rep.

Additionally social graphs could prompt for AI black hats to target groups of friends at the same time as opposed to randomness. And in that scenario what happens when the attacker modifies the friends list while you sleep? Appreciate your comment.