Wait? You can reset a facebook password by having 3 friends confirm?
What the? First of all getting 3 friends to pull a prank on someone should be fairly easy.
Other than that you can just create 3 fake accounts and get the victim to add you as friend.
I find that way worse than these security questions, because there's essentialy no way to defend against this.
Well, except by not having facebook (which luckily I don't have).
What the original author failed to mention (or likely never bothered to find out) was it's not simply 3 friends, but instead 3 friends from distinct social circles, possibly with a minimum mutual friend requirement or more.
When you choose the you're friend you want to verify, it dramatically limits the choice pool for the next two, meaning you can't pick 3 mutual friends, you need to pick yourself, their friend from back in college you don't know, and their sister. Harder to do than get any three friends to play a prank.
Well, except by not having facebook (which luckily I don't have).