Facebook uses HTTPS so it won't be a problem. Anything that doesn't use HTTPS for web browsing has the possibility of your passwords being sent and viewed by someone sniffing the network. Generally if you aren't doing anything sensitive you'll be fine, but if you use the same password for everything that would be a problem.So, unless I'm doing banking, the worst that could happen is someone could see my Facebook password or the password for my computer forum account?
Facebook uses HTTPS so it won't be a problem. Anything that doesn't use HTTPS for web browsing has the possibility of your passwords being sent and viewed by someone sniffing the network. Generally if you aren't doing anything sensitive you'll be fine, but if you use the same password for everything that would be a problem.
MITM (Man In The Middle) attacks exist and they could gran a SSL session. Also, you need to make sure you connect to a real free hotspot and not someone's rouge computer.