Recently I had to access a page on a website via my facebook id.
Wondering, if it is possible that they can collect information such as who my friends are and so on?
Basically I got an email to check out a link.
I click on the link, It says I have to login to facebook.
I log in. I get the warning..Leaving facebook.
Then I click continue and it takes me to the site.
Is this bad programming or phishing behind the scenes?
It depends what kind of information they asked for.
When they write their code, they ask for certain privileges, or permissions. You, in turn, by logging in, give them permission to do whatever they asked for.
So, in theory, it is possible that they now know who’s your friend.
If you’ve signed in on a website that wasn’t Facebook, and that simply asked for your credentials without appearing genuine, than you can bet those people will be able to steal your information and know who your friend is.