One of the surprising things that I learned pretty quickly (as an IT professional I should know this and should have checked it beforehand) is that the Facebook login session is unencrypted, which means that any five year old can hack into a Facebook account by sniffing passwords on the network. Encrypting login sessions is such a basic security measure that it's scandalous that the default login page for Facebook does not use SSL (Secure Sockets Layer).