This facebook application relies on either a pin number, or the caller's caller id to identify who is calling. The latter does not seem like a smart means of authentication at all. Simply spoof someone's phone number (that may already be conveniently listed on their facebook page) and join a conference as them. If the other parties are not familiar with your voice, you could potentially cause some damage. Yikes.