There's been a rash of LJ communities where the owners had left/disappeared leaving things just humming along, then suddenly becoming hijacked with spam posts, often in Russian, sometimes in English but linking you to a Russian site. It turns out the semi-abandoned account of the owner or another mod got reactivated by someone who'd acquired an older email address registered to the mod's account and used that to gain control of the comm.
LJ Knows Good Music - what's going on?:
The original recommendation is best: if changing email addresses, go back and delete old ones using the link above. They still had a reference to acroyear@io.com attached to me, for example.
LJ Knows Good Music - what's going on?:
This appears to happen if someone manages to get access to a maintainer account by re-registering an old email address that is still listed on the account. Hotmail is especially nice for that as addresses are deleted for inactivity and can be re-registered. Therefore, it's advisable (not just for maintainers, but for everyone) to remove all email addresses you don't control or no longer want to use from your account.LJ Knows Good Music - what's going on?:
so if i have an old hotmail account that got deleted for not being in use, some other person can register that account and then ask for the livejournal passwords? i didn't know that.LJ Knows Good Music - what's going on?:
Yes, that's what is so dangerous about leaving old addresses in your account. While an old account can help you regain access to your LJ if you no longer have access to your current email, it's really a security risk if you don't control the old email account any more. And Hotmail's policy is really quite dumb, from a security point of view.actually, LJ follows a similar policy with the ability to rename an account to one that's been completely deleted and removed. ljname@livejournal.com becomes an active address again. for that matter, is the policy any different from letting a domain name lapse? someone else gets it, someone else can create ANY email address from that domain.
The original recommendation is best: if changing email addresses, go back and delete old ones using the link above. They still had a reference to acroyear@io.com attached to me, for example.