on passwords and third-party sites
Third-party sites can do nifty groovy things when they have access to your journal. Auto-post, collect stats, archive, cross-post, you name it, it's cool.

I'm not going to stand here and say you can't give your password to third-party sites, because there's no way I can enforce that. I will, however, remind all that those of you who have support privs, especially those of you with access to private categories and Abuse tools, should be the most careful of all LJ users about which applications you allow to access your journal.

So, a few tips:

* When it's a one-time thing, change your password (before and) after using a third-party tool.

* If you're using an auto-poster or a cross-poster, we strongly prefer that you use methods that don't involve storing your password on a third-party site, methods such as using a multi-site-compatible client or an email post.

* Use common sense. Every time you give out your password, there's a risk of it being intercepted. But a large site like Flickr is probably more likely to keep your data secure than a small-time operation run by somebody whose background you don't know. We're not going to maintain a list of which sites we trust and which sites you shouldn't use; just use your common sense.