This reminds me of an exploit somebody found last year where they could force facebook to do a DDOS attack for them:

http://chr13.com/2014/04/20/using-facebook-notes-to-ddos-any...