*sigh* when will people learn? Of course Facebook is gonna be a big target for crooks, and cybercriminals. People need to know that when things become too popular, hackers/cybercriminals tend to target them. They don't care who you are. They just want your personal/financial info for their personal/financial gain. I'm so glad that I never feel for this trap (obtaining a FaceBook account). Nor do I do Twitter, or MySpace, or any social-networking at all really. Nor do I manage finances or bank online (except when I shop on Amazon) which is another big target for scammers & phishers. WinCustomize and Amazon are the only sites I use to voice my opinions on the web (excluding e-mail).
And as for passwords, people need to at least alter TWO or more characters for each and every password (doesn't matter which ones), so that way it's not completely different to the point of not remembering or getting confused. Don't make your passwords anything obvious, like any English words (or commonly used words from other languages). Just putting in my two cents.