Years ago Krebs did something similar whenever there was a new hole in the Java interpreter. He regularly advocated that people remove Java support from their web browsers, and that they consider removing it entirely from their computers if they don't use any Java apps.

In a related comment found below the original article, "MrB" writes how Facebook still tracks people without accounts. This is why I block Facebook's BGP prefixes in my router, their domains in my DNS resolver, and key hostnames in /etc/hosts. With this combination, Facebook is unlikely to be able to track me even when I'm in between setups. For example it should work in cases where I temporarily fail to re-populate /etc/hosts while doing testing, or set up a new computer (still using the same router), etc. And since their IP blocks and domains are relatively stable, it doesn't take much babysitting on my part.

I would expect these FB groups to be more like scam sites Alboraaq or Cardmafia than “real” crime forums like Verified.