Facebook has quietly shuttered its three-year-old email service that gave users “@facebook.com” email addresses.
From now on, emails sent to an “@facebook.com” address will be forwarded to the personal email address from which the member signed up for the site.
This looks like a security problem waiting to happen. Since @facebook.com accounts use a member’s public username, it’s trivial to now email a given user at their personal email address. That opens the door to the possibility of a targeted attack on that email address, which, if connected to anything else, is potentially disastrous.