from: jer@nyquil.org
to: support@flickr.com
date: Mar 25, 2007 11:14 AM
subject: someone has stolen my account!
Dear flickr,
I’ve been a long-time flickr user, having signed up and paid for a pro account way back in the day, staying relatively happy most of this time. Now, though, I seem to be unable to access my account due to some malicious behavior on the part of one or more of your users.
It seems as if some jerk has hacked your site, and is currently engaging in some sort of “phishing” activity, because the site now requires me to give my personal information to them before I can access my account — or any other flickr page, for that matter. Even pictures submitted by my friends and contacts cannot be viewed until I submit my personal information to them. They’re going by the vaguely-insulting moniker “Yahoo!,” which I can only assume means “Yahoo! All these people are giving me their personal information… muhaha. Now I’ll pet my overly-furry white cat.”
I figured that this is surely something you’d want to know about so you can take steps to ensure that this “Yahoo!” guy doesn’t keep persisting with this identity-theft ruse. I’m not giving my information to “Yahoo!,” so anything you can do would be appreciated.
Also: I was bothered enough by your seemingly lacking security (if someone can hack it so that everything a user does would require submitting information to a dubiously sketchy individual, it’s sure not making me feel confident that my information is secure) that I was tempted to delete my account. Oddly, I discovered that in order to do so, I’d have to give my info to “Yahoo!” first.
Let me repeat that. I’m upset that I don’t want to give this “Yahoo!” guy my info, so I decided to delete my account, but to do that, I have to give my info to “Yahoo!” first??!
This is just too much.
Oh, also: I could no longer find any kind of contact info on your site, so I just sorta guessed at an email address that seemed plausible. Just to be safe, I’ve posted this letter on my fairly popular blog so that you might find it in your referral logs in the event that it gets lost on its way to you.