"Facebook would treat users as “hacked’ since their location would vary throughout the world. Using the .onion address prevents the lock-out from occurring."
So anybody wanting to "hack" a Facebook account should do it via Tor and use the .onion address to avoid being detected and locked out? How does that work?
I'm guessing they treat the first login via .onion as a new location and require some additional verification but subsequent ones as if they were coming from a known location. They could achieve the same by just treating all exit nodes as the same location but this looks much more elegant to me.
So anybody wanting to "hack" a Facebook account should do it via Tor and use the .onion address to avoid being detected and locked out? How does that work?