Hacker News new | ask | show | jobs
by kalleboo 4615 days ago
They already have an "identify 5 photos of my friends" system for some account lockout situations. But that may not be sufficient if the hacker has already had access to the account for a while (they'll have had time to scrape the user's friends list).