The hack @ev just tweeted – http://j.mp/4JcxcI – was enabled because we observed real users trying to get to a profile that way.