Imagine this on the hands of Facebook scammers, then. It wouldn't last the two hours it took WSJ journalists to exploit it.