If you were completely unaware that this happened like I was, here's the story: http://www.theatlantic.com/technology/archive/2011/01/the-inside-story-of-how-fa

If you were completely unaware that this happened like I was, here's the story: http://www.theatlantic.com/technology/archive/2011/01/the-inside-story-of-how-facebook-responded-to-tunisian-hacks/70044/ http://www.theatlantic.com/technology/archive/2011/01/the-in... A javascript keylogger was inserted into pages served over plain HTTP. Here's the source: http://www.hackerzvoice.net/node/105 http://www.hackerzvoice.net/node/105 With a little more tact and obfuscation, I bet an attacker could get away would doing that on a large scale for quite some time.