Good write up from The Register about a recently discovered and patched flaw in Facebook's authentication system.

http://www.theregister.co.uk/2011/02/02/facebook_plugs_authentication_flaw/