Did he ever fix that thing on his site where requesting any of his "update profile" pages with GET (or otherwise without enough POST data) would cause your profile data to be erased? So basically your profile could be erased by any website on the internet that wanted to, hell, I think your browser is technically allowed to make a GET request to it as well for any reason...