it seems like it has happened very briefly, http://www.mobileinc.co.uk/2009/12/facebook-app-uses-exploit...