If enough people start using technique they will have no choice but to create a fix for this.
Exclusions
The following bugs are not eligible for a bounty (and we do not recommend testing for these):
...
Denial of Service Vulnerabilities
...
I guess you have to use this to attack high-profile targets (or Facebook themselves) until they notice.
If you can easily cause any website to become an on demand low orbit ion cannon, they're going to cause problems.
You can do this with any website that lets users post links which may or may not be automatically loaded (by other users too). There are tons of these around; forums, blogs, etc. See also: Slashdot effect. That's also a true DDoS, coming from many IPs, as compared with a few of Facebook's servers.