This has existed since 2014, in embryonic form. The exploit was that FB put your name in the public response from the Graph API. I remember discovering that, s

This has existed since 2014, in embryonic form. The exploit was that FB put your name in the public response from the Graph API. I remember discovering that, saying that might be abusable, and moved on with my life. About a year later, I started getting oddly specific t-shirts like all <last names> do <x good>.