A commenter on the post just suggested auditing all the apps/sites with which you've used FB auth. This hadn't occurred to me, and frankly is even more scary IMHO. In theory, anyone who sufficiently compromises one of those apps would be able to access any of the permissions you've given the app.