"online banking security starts from 'the client computer is compromised'"
Facebook currently (or did) reset the password by having you identify the names of your friends using their pictures. I could see this as a way to authenticate a transaction.
Really? None of your friends have pictures of cats or their babies or grainy shots of them and four other friends as their profile pictures? Because sometimes it feels like half of mine do.