Make that 99% loophole free. Quoting myself:
Uhhmm, I got bad news for you folks. The security they implemented is trivial to get
around. I'm not that much smarter than the average bear, but I can STILL login as
anyone I want to login as (just did!)
Now I won't divulge the secret, but let's say that as long as they use a third party
chat vendor, it's going to be difficult to protect. It's not *impossible*, but FYI, it
took me ten seconds to get around the current protection.
It's just like car theft; if they want to get around the protection, they will. You just
have to make it very difficult