The website doesn't have access to your friends and cannot post anything without your consent. It can just set up an isolated iframe which is controlled by Facebook. There is no communication between the iframe & the page you're on (except for the initial setup data) so the website cannot post on your behalf. It might sound creepy but it's actually very safe.
In the article, the writer is at issues with social apps that he allowed to post on his behalf. It's entirely different.
My take on this: the (only) problem is that Facebook has changed the way info is displayed (with the ticker feed) and in that new context, the rights we gave to social apps on our Facebook accounts have been extended. Not technically but that's what it amounts to in pratice, since it's much more likely for stuff getting posted to be seen.
In the article, the writer is at issues with social apps that he allowed to post on his behalf. It's entirely different.
My take on this: the (only) problem is that Facebook has changed the way info is displayed (with the ticker feed) and in that new context, the rights we gave to social apps on our Facebook accounts have been extended. Not technically but that's what it amounts to in pratice, since it's much more likely for stuff getting posted to be seen.