Major LJ security bug

[lethargic_man]

kerrypolka posts:

Apparently there's a pretty spectacular LJ privacy bug that is allowing random users to log into other random users' accounts, including editing and deleting entries, seeing private entries, changing passwords, etc.

She has bailed completely out of LJ for the time being (all her posts being crossposts from DreamWidth anyway). I don't have time to do this, as I'm about to head off to visit aviva_m, and, annoyingly, LJ Archive has not been working for me—possibly a security issue to do with firewalls—so I'm just going to hope LJ get this sorted pretty damn fast, and that no one diddles with my journal; but you may wish to act otherwise.

If anyone wants DreamWidth invite codes from me, I've got more than I know what to do with, but you might have to wait until Monday for me to get a chance to act in response.

ETA: The problem has been fixed now.