For folks who don't follow
news, there was a "limited but serious privacy breach" via media/Flash embedding. Details are
here, including how to tell if you or someone on your f-list was affected. Right now the only site from which media embedding is allowed is YouTube, but they're working on updating the whitelist.