[userbinator]

If all you need to get onto the list is a request to the profile page URL, even a simple image link in a forum signature/profile image/etc. might be enough...

[samstave]

Hmm so you could then see everyone who loaded that page/comment?

This has probably already been an exploit used by some people..