Facebook has exempted high-profile users from some or all of its rules

replying to cratermoon as a English born nearly retired child of a now almost entirely American family, whose parents totalled 100 years of life and was taught to program and think by my uncle who would be 121 years old if alive and who worked intimately with with the American war command, I have no answer to your question other than that is the defining of the American Way to believe that the rules apply for all of us equally. The definition of 20th century British nature is to be the inbred product of generations of ancestors who never doubted the rules for the privileged are not even comparable to those for the populace.

I am too old for reconsidering the possibilities of a investment linked naturalisation process, but the development in American political culture since 2016 has convinced me that I would be committed to doing everything possible to reverse recent real and far more damaging perceived decay of moral and judicial common citizenry in the USA. The rest of the world doesn't know how terrible this is for everyone.

"Turns out managing communication for nearly the entire human race is hard! And requires a lot of people"

Yeah, no shit! You say that like Facebook didn't completely strong-arm their way into wanting to become the sole communication provider for the entire world. They struck deals and started entire projects making sure telcos in emerging markets would only get priority to Facebook, and Wikipedia, and basically no other competitors. They tried to convince the Indian government to make access to Facebook 100% free of charge until backlashed pushed them out.

If they didn't want to become the mediator of all human communication, that's fine, they can stop at any time. But they themselves chose to put themselves here as the messenger, growth-at-all-costs style, and that means they get to deal with the consequences. It's not like they stumbled into this problem by accident.

I can't feel pity for a company that wanted world domination, achieved it, and is now stuck with the issues. Turns out when you're the communication provider for 3 billion users, you get the problems of your 3 billion users! You can't say they didn't know that going in...

This kind of makes sense. For every high profile person posting an ML-flagged “Napalm Girl” in the context of discussion around the Vietnam war, there’s thousands of instances of real child porn.

>If you have an idea for a better way, you should share it.

I'm certain that the other poster won't present some kind of practical outline because part-way through the brainstorming they will realize they are designing a "Social Credit Score" and become too frustrated to continue.

I disagree.

Let's take your example of Mark Z.

What makes you think that this is unique case? What about people that suddenly come to fame, like viral video subjects?

A simple solution is to disallow logging in from new devices and the attempt being silently dropped so you are not bothered, unless you do some magic like generate one time key to complete the procedure on the new device.

I could think of a lot of people that would find it useful.

Or allow setting up 2FA token (other than mobile) correctly.

Instead what FB does is make it impossible to secure your account because they insist whatever you want you should always be able to recover your password with your phone number.

Years ago when I was still using it (I had reason) I tried to secure it with my Yubico. Unfortunately, it wasn't possible to configure FB to not allow you to log in on a new device without the key.

I understand how the discussion probably went: "Let's make it so that we can score some marketing points but let's not really make it requirement because we will be flooded with requests from people who do not understand they will never be able to log in if they loose the token."

But that's exactly what I want. I have a small fleet of these so it is not possible for me to loose them all but unfortunately most sites that purport to allowing 2FA can't do it well because they either don't allow configuring multiple tokens or if they do, they don't allow really lock your account so it is not possible to log in the next time without the token.