Has Hacker News been hacked/cracked?
pg: Yes.  I made an unbelievably stupid mistake in the code that generates forms with labelled fields.  It was basically functional programming taken a little too far: I generated the same form whether the fields were editable or not, and then later if there were no editable fields I just omitted the submit button.  So anyone looking at the source of one of these pages could find a fnid that would work to modify the object displayed on it.  (There's still a fnid, but it no longer does anything.)