That's interesting, but: a) They are going after the third party, not the people that gave them their passwords, and b) I believe Facebook also harvest passwo

That's interesting, but: a) They are going after the third party, not the people that gave them their passwords, and b) I believe Facebook also harvest passwords for other sites (hotmail etc) c) In practice, there's not much difference between "Nobody can create a service that uses user's passwords to automate their Facebook access" and "You can't use any automated processes to access Facebook".