It's incredibly insecure.
People who get their hacking-skills from some mainstream tech blogs like gizmodo could own you so hard now, it's unbelievable.
I am not posting a how-to here because it's very illegal and we wouldn't want you to get any ideas, but the best defense you have is avoiding FB on all costs.
