Leave a comment

Comments 2

falling_voices October 27 2011, 15:17:36 UTC
Hold on, what did LJ do this time?

Reply

(The comment has been removed)

errantcomment October 27 2011, 19:56:50 UTC
They released a new fix that borked LJLogin. This is from karadin:

Several users are able to see the f-locked and the private entries of other users/communities even if they are not friended by or they are banned from that particular user/community. Not only that, but several users have been taken to another user's entries when they try edit their own. The same mix-up in redirects goes for the redirect to edit profiles, edit journal information/settings, managing userpics, and even checking your message inbox. To put it simply: certain users have complete access to another user's account.

The thing is LJ knew that would happen, and they didn't tell LJLogin, which is kind of a fail on their part.

Reply


Leave a comment

Up