Hacker News Reader

So, the problem is framebusting code not playing well with iframes. ;-)

Facebook doesn't want people to enable cross domain authentications/spoofing. If Facebook enabled their plugins to work inside iframes external to the Facebook environment, it'd be easy to maliciously authenticate users to give data to a fourth party.

Reply on news.ycombinator.com