Maybe I haven't kept up, but if an account holder has their friends list publicly visible, can't you just open up another browser and refresh their profile until the relevant friend appears in the friends list?<p>Limiting factors:<p>A large number of friends would make this take a while.<p>Friends using non-self pictures as their profile pictures would prevent identification, unless the prompt contained their profile picture rather than a picture they are tagged in (or does the verification process only use profile pictures?).<p>Some third point I'm not thinking of.<p>Anyway, identifying pictures, when the target's friends list is publicly visible, seems kind of weak, on the surface.<p>EDIT: Probably to my eventual demise, but I've become exhausted and stopped keeping up with all the changing FB details. So, maybe I'm clueless on this point.