Security Tip : While on FB, look at your URL address (the very top box on your screen.) If you see "http:" instead of "https:" then you DO NOT have a secure session and can be hacked. Go to Account - Account Settings - Account Security - click Change. Check box (Browse Facebook on a secure connection), click Save. FB has automatically set it on the non-secure setting.
(this is a tip that has been making its way around Facebook. I've done this about a month ago and I have been on a secure connection ever since)