[z3t4]

Seeing the "auth" query. There is a chance that HN was "too clever" about it, and it might be possible to use other users id to upvote, or upvote many times, if you can figure out the hash algorithm.

[firloop]

This has already been exploited at least once: https://news.ycombinator.com/item?id=639976