Even if a site used openid and stored no passwords it could still be a target. People want to put spammy links to their spam sites to increase caboodle rankings

Even if a site used openid and stored no passwords it could still be a target. People want to put spammy links to their spam sites to increase caboodle rankings. You could send a private message on the forum to every forum user, a good percentage will click on it. You've now got lots of Ubuntu forums users to open an arbitrary url, that can be used to spring board mote hacking.