Everytime a new user visits your website there\'s a bunch of techniques to learn their social network profile without their permission (profile URL http://facebook.com/[user_id], full name, email, avatar, his friends). It uses fully legal tricks, such as clickjacking/CSRF/XSS.