basicly, what i think the flash authors did was make it so it activated a link in the flash movie that posted a reply to another flash video... it had nothing to do w/ passwords, and im assuming would only affect logged in users... while it took some genious on the part of the offenders, why not gain some legitimate credibility by relaying this exploitation of NG to someone?
serriously, theyre lamers :\