Sigh its gone now. From what I can tell, the script managed to hijack a facebook page to insert a link under a fake tab "Photo". If clicked, loaded an iframe, and clicking on that iframe liked the page.
This has been happening for months and is nothing new. Even companies that host big name company profiles on Facebook use this tactic to "unlock" content.
Calling this a worm or exploit is absurdly silly. There is no security threat here, just don't click on dumb links.
While not completely clear, I believe the article is stating that clicking affected "like" buttons will cause unwanted actions including unauthorized wall posts.
No, this has been occurring for forever... is no one on HN on Facebook? I mean, I don't blame you, but when you click "Like" it has ALWAYS posted "Blah likes [omg women kills her daughter] on [stupidspam.com]".
