Share Your Password, Spam Your Friends

Time and time again security experts warn you not to share your password with anyone, yet sites like Facebook are always encouraging you to give them the password of an account that is not a Facebook account… your email account.
You’ve probably seen the screen shot below on your Facebook friends page. It is asking you for the password to the email account you signed up with Facebook for. This means you are giving Facebook the keys to your email account. Given the miserable track record that Facebook has when it comes to privacy that is not an advisable action. Facebook claims they want to help you find your friends, and providing the password allows them to search your contact list and cross reference it for email addresses of other Facebook account holders.
 
Do you notice anything here? At the bottom it says that Facebook will not store your password, but do you see what it does not say? It does not say that Facebook won’t read your email. It does not say that Facebook won’t share your email contacts with third parties. In fact if you click on the “Learn More” link you will find that Facebook is doing a bit more than only looking up email addresses you have to see if they match email (continue reading...)