facebook does it again?
01May07
Now, I’m not a hyper-crazy conspiracy-theorizing privacy nut, but does Facebook seriously think I’m going to give them my e-mail password?

Now, I’m not a hyper-crazy conspiracy-theorizing privacy nut, but does Facebook seriously think I’m going to give them my e-mail password?

Yeah, like they even have to ask – we all know it’s your ATM pin: 5318008.
P.S. Erdem – call me!
Wacky.
Gmail/Yahoo/etc also asks for email acct passwords, if you want to use the POP3 retrieval function to pull mail from other mail accounts. I’ve always eyed those functions warily. But, I guess if I trust Gmail to keep some fairly sensitive correspondences, I might as well trust it with the rest of my mail. Though that password probably shouldn’t be linked to, say, my iSchool account or something.
But Facebook … hmm. Has it even adopted SSL for its main login yet? Or is the Facebook password still fired out plaintext for all to see?
this has become a trend on many web 2.0 sites and definitely sets off some red flags for me. it would be interesting to do an analysis to see how sites like facebook handle the authentication protocol. wesabe (an online financial manager) comes to mind here, and their approach is to be fairly transparent as to their process (where they connect to your financial institution using a program you run locally on your own computer), which i think is a trend we may be seeing more and more of in the next few years (the transparency that is).