Good luck to them. Facebook is capable of handling huge amounts of traffic, so DDoS attacks are out of the question for them, and I seriously doubt facebook will have any SQLi or xss vulnerabilities.