This can be exploited by writing a new note, and when you're asked to choose the recipients:
- Enter the name of one of your friends.
- Find the Facebook ID of the person you want to send the sticky to.
- Substitute the form's
recipient1value with the ID of your target. (Firebug makes this easy.)