Currently I'm playing with the facebook API.  It's very easy to write an application and host it on a free website, and if the user clicks 'accept' get access to their profile information.

Here is my test page.

(NOTE: this doesn't do anything malicious, but it could)

Will