Well, while it makes a brute-force attack somewhat easier, it is still certainly not easy. While I haven't tried it, I suppose Facebook has some strong brute-fo

Well, while it makes a brute-force attack somewhat easier, it is still certainly not easy. While I haven't tried it, I suppose Facebook has some strong brute-force prevention methods (rate limiting, for instance, captchas etc). Most Facebook account's get compromised through social engineering / keyloggers. And that risk is not increased by facebooks login implementation.