Facebook has been gathering a bit of negative publicity due to its Beacon feature. It started as opt-out but is now opt-in after all the complaints. Needless to say I have disabled Beacon globally in my Facebook account the moment it was possible (under Privacy > External Websites).
Regardless of privacy issues, the Beacon is interesting from the technical perspective. I had wondered how Facebook JavaScripts were able to directly contact Facebook servers from partners’ web pages. The short answer: iframe. The long answer: Deconstructing Facebook Beacon JavaScript.
On a Beacon related note, you can have some fun by adding fake Beacon stories.