Ouch, it is the first option; if logged into facebook it seems you can see any old friends list (including ones you can't normally see). The "command" is just to go to the URL in the shell command in your authenticated browser (or to faff about with cookies if you want to use lynx/wget/curl).<p>FB also removed the option to completely opt out of their application API at the same time they messed this up. Not impressed.