Beware Of Facebook Comment Spoofing

F-Secure has suggested that Facebook’s new reply-by-email feature may be exploitable. The press release explains that malicious users can respond to any thread on Facebook as long as they have the proper thread email address. The full explanation is this as follows.

When there is a posted item or status update available on Facebook, and a user leaves a comment, a thread begins. All the users on the comment thread receive email updates of the latest activity on the thread.