Facebook, as an "experiment", collected the text its useds started to enter as status updates and ultimately did not send.

Facebook also announced it planned to track mouse movement even in the absence of a click.

These work by means of malicious Javascript code.