The first line of defence against Facebook mining is not to run FB apps (because they can harvest your likes).

But is it possible for an app to retrieve the likes of a user's friends?