clipped from: news.bbc.co.uk 
The popular social networking site allows users to add a variety of applications to their profile.
But a malicious program, masquerading as a harmless application, could potentially harvest personal data.
Facebook says users should exercise caution when adding applications. Any programs which violate their terms will be removed, the network said.
We made up the fictitious profile of Bob Smith. He keeps most of his details on his profile private from non-friends.
While we could not get all details, what we did get, included his name, hometown, school, interests and photograph, would certainly help us to steal someone's identity.
So how did we do it?