One good thing about all this is the outbound mail from FB to me about my account is signed with their secret key. Their public key is well known, and therefore the signed message is probably reliable. No more questionable "Please click here to reset your password, oh, and give us your bank account number and your SS while you're at it" -- at least. What comes from FB is non-reputable. If it ain't signed, it ain't from them.
I think.
Biting the hand that feeds IT
