How To Hack Facebook In 51 Seconds
It's a Moods application hack. Really, it's the application programmer's fault for not checking if the auth_token received corresponds to the fb_sig_user.
http://www.businessinsider.com/2008/3/facebook-hacking-it-can-take-less-than-1-minute

