You can do a lot of things on Facebook. You can organize parties. You can join protest groups. You can even post pictures of yourself in compromising positions for all of your friends and relatives to see. And now, to bring in 2008, you can also be tricked into downloading spyware on Facebook. 

A new Facebook widget is out in the wild. The app is called Secret Crush. Supposedly, it lets you know who your secret crush is (--as if you had one, ugly-face!) If you fall for finding out your crush, the program tries to install and spread spyware -- known as the Zango variety -- onto your computer. Like all good spyware, this nefarious application tracks web surfing and collects information on you.

As a Facebookian twist on spyware, the Secret Crush app demands that users send out invites for the app to 5 different friends, before their Secret Crushes are revealed. Because the Facebook Secret Crush app forces people to waive all the rights to privacy when installing the widget (like pretty much all Facebook apps), it falls into a grey area of legality. But the bad part of it all is, even if you send out 5 invites, you never are told who your Secret Crush is.

Research group Fortinet has been tracking this latest in spyware, and have alerted the Facebook powers that be. Incredibly, Fortinet estimates that a whopping 1 million Facebook users are infected by this app.