Researcher shows how to "friend" anyone on Facebook within 24 hours
I was surprised to learn that Facebook has a "3 trusted friends" method for recovering your account without the original email or security question response.EDIT: tried to find a better source for that, came up with https://www.facebook.com/notes/facebook-security/national-cy...Looks like the feature is still being rolled out, and the attacker doesn't get to choose which friends he trusts.