Am I the only one, or is this a strange email from Facebook?
I mean, “lost”?? No backups?
I hear you. This must be fake – a phishing email, right?
No https on the page I'm directed to, either… The average user doesn't have a chance when figuring out whether this is legit or not. So guess what. He or she won't even try.
I'll forget and forgive the “loss”, but following it up by putting all their users through a sequence of steps that teaches them how to be phished really stinks.
Seems to drive home the main premise of Information Cards set forth in the Laws of Identity:
Hundreds of millions of people have been trained to accept anything any site wants to throw at them as being the “normal way” to conduct business online. They have been taught to type their names,
secret passwords and personal identifying information into almost any input form that appears on their screen.
There is no consistent and comprehensible framework allowing them to evaluate the authenticity of the sites they visit, and they don’t have a reliable way of knowing when they are disclosing private information to illegitimate parties.