http://facecrooks.com/Internet-Safety-Privacy/how-a-friends-hacked-facebook-account-can-compromise-your-privacy-and-security.html

Always assume that anything you post on Facebook can become publicly available.