Well, if you see the link:
http://www.facebook.com/badge.php?&items[]=badge_profile_pic&items[]=badge_mobile_status&layout=vert&format=png
It is clearly a dynamic PHP file that bases results in variables obtained by POST protocol... you and only you can see it when you posted it and while carrying those variables... Shap sees his baby who I'm sure is lovely ^_^
EDIT: DUH! Never used facebook heh...