Yeah, but if you want to do a DDOS attack you can just use one of the already configured tools out there that will bombard the server with as many requests as possible. A few chained ajax requests are never going to replicate that sort of load.