LJ security holes

[yendi]

So, you saw the announcement yesterday about LJ changing URLs for all accounts because of security risks, and were wondering what, exactly, those risks were (and you, like me, likely lacked the patience to weed through all the comments)?

The Washington Post explains.

Link courtesy windswept.