> Of course, they could hijack the login procedure and harvest passwords in real-time until they're detected. Facebook makes it really hard for people to log o

> Of course, they could hijack the login procedure and harvest passwords in real-time until they're detected. Facebook makes it really hard for people to log off. Unless one is using a shared computer, I doubt she types her password more than a couple times a year.