So. Since the LJ-update cgi doesn't (can't?) use a page ID to identify the originating page, you can post to it from anywhere. Very funny, Mr. Jeffrey Paul, though it looks like you just copied the Russian sausage game code. Snort snort you should've made it say "fart".

Friends: your password can not be stolen that way, nor can it be changed, molested, or unnecessarily frightened. LJ has also made it so the whole post-from-somewhere-else thing doesn't work again. You're ok.

Anyway, here's what worries me: People are responding very badly to a childish prank. Death threats? Those are criminal. Denial of service? Also illegal, good way to get fired or arrested. Signing him up for spam lists? Isn't that sort of like giving money to the people who sell YOUR email addresses? Revenge is a loser's game; there's no percentage in it.

----------------------------
revision 1.83
date: 2004/06/12 18:09:46; author: marksmith; state: Exp; lines: +1 -1
[int: because people never understand]
Fix bug that was reintroduced a year ago after being fixed two years ago:
ability to post to update.bml and have entries posted to a user's journal
without needing to know anything about them.
[..]
----------------------------
revision 1.29
date: 2002/06/21 15:24:03; author: bradfitz; state: Exp; lines: +6 -0
stop the "LJ Virus".

Cute. :)
----------------------------