Hacker News Reader

I agree with the overall sentiment that this is a relatively minor vulnerability.

It could be put to malicious use by phishers. If I know your full name I can make more realistic phishing emails.

Well the problem with this vulnerability is that many spammers have millions of email addresses, only a fraction of them with the full name. With this Facebook issue they will get tens or hundreds of thousands of names connected, and will further resell this database.

This seems like quite an asset to me, because spam mails with the real name will have a much higher engagement.

I always use my real name when I send email, so email coming to me with my name on it is unremarkable and does not give me any reason to think it's "safe."

This is assuming I used my real name on Facebook.

Reply on news.ycombinator.com