I've been pretty anal-retentive about blocking apps, setting app access, etc. for some time now and educating my "friends" on how to do this. I'm very aware of when I authorize an application and have used FB Connect twice a long time ago on sites that did not show up as unsolicited apps. Sites I visited this morning, however, are showing up. I never logged in to those sites (or have any kind of account, made a comment etc). This unauthorized "installation" is very much happening.