PSA: LiveJournal security issue

[desh]

There's recently been a security issue on LJ. The security settings of some of your posts may have been affected. Everyone should read this for more info. (It's a post in a community that discusses goings-on on LJ, and it's a pretty thorough explanation of what happened, how you can find out if your entries were infected, and how to fix it.)

Comments

[krisispm.livejournal.com]

I think the post explains it awfully - not in a way I can digest on my lunch break, since I have no idea what LJ-toys even is.

Also, any security breach should go out as a push communication to all users; it's shameful to be finding this out on a random check of my friends page.

One of the many reasons I took my blog-eggs out of the LJ basket some time ago.

[desh]

To be fair, news did a much more thorough explanation about an hour after I posted this, about 8-9 hours after the exploit was patched (and that entire stretch of time was after business hours in LJ's time zone). I think that's fair, and that news is the appropriate way to communicate this. I think they handled all of this quite well. The post I linked above was just the best way to get info out quickly before official communication.