Read nothing scandalous about Facebook's behavior. This HN headline doesn't deliver. There is nothing wrong with the request to keep this quiet for a bit so you can investigate. This is not uncommon in the security world where vendors get some time to get their stuff together and release a fix. Depending on the severity of the issue and the risk of abuse.
“Oh and by the way, you are not allowed to disclose any part of this conversation; it is a secret that we are even having this conversation” If this is true, it's practically begging for the blogger to research the law, and publish the whole conversation because FB has no right whatsoever to make such demand. I wouldn't call it scandalous, but it would certainly be a pretty dumb thing to say. If I had to guess, I wou…
> Perhaps a polite request to keep quiet. Who knows, Facebook is still a teenager in many respects so it's anybody's guess.
My experience with just about any company is that they would state their hopes as facts, and expect you to accept that as a fact. And it works with the vast majority of people.
Case (from outside the US): Credit card got a fraudulent charge. Called up the credit card company, disputing the charge (After credit card company was already paid by an automated payment service).
Credit card company: "Well, we're keeping your money, the law says we have 60 days to figure out if you are right or the merchant is right; if you are right, we'll give you back the money".
Me: "Ahhm. The law says you have to give me back the money this instant, and you have 60 days to figure out if you believe that the charge wasn't fraudulent; and if you do, you can explain it to me, and if I still disagree then there's a whole section in the law about that but you don't get any money automatically either"
Credit company: "Oh, you're right. Here's your money back, we'll be in touch in at most 6o days".