"Getting rid of [spoofed accounts] mostly involves forcing sign ups to be confirmed.
Whitelist only friend system would be interesting,"

Yep.