28 Sep 2018 ... If your account had 2fa, it seems unlikely that an attacker could use this ... This question is a great opportunity to point out that FB badly botched the handling of this. ... and asking the user to click logout, then manually type facebook.com ... being on this site versus the risk of another breach and the sensitivity ...