Playing devil's advocate, shouldn't this work in reverse? Providing their IP address, shouldn't someone be able to send Facebook a cease and desist order to stop trespassing on their system by running Facebook javascript in their browser (via like buttons) when visiting non-Facebook domains?