You should be glad they have that registration flaw. Consider this scenario: OkCupid does require email validation, and the attacker still makes the false acco

You should be glad they have that registration flaw. Consider this scenario: OkCupid does require email validation, and the attacker still makes the false account under your name with your photo and all the same information, and simply emails you a link to it. Same exact thing. It doesn't even look like your email address is visible on the page. All that OkCupid's flaw served as here was an instant forward of the page to you which you should actually be grateful for. Imagine the attacker wasn't able to use your real email and in fact never did email you the link to it, this page would be up on OKC unbeknownst to you because OKC wouldn't have emailed the confirmation to you. While the attack was a pretty messed up idea, I feel you completely over-reacted. You are way too enthusiastic, publicly, about wanting to get revenge on OkCupid, who really didn't do anything wrong. I would rethink the subheading with which you chose to adorn your Twitter background. People will always misuse technology. A website can't be sued for having a loophole in its registration system. That's just stupid. However, a person could be sued for attempting to anonymously recruit crazy people (the only type who would think the original post is real and go through with the request) to break into your house.