Tumblr security hole: does this work for you?
Recently, after some playing with the chromium debugger in the Tumblr blog customize panel, I discovered that just about any theme (including premium) can be downloaded via a simple wget command:wget http://tumblr.com/customize_api/theme/34426 --post-data="Origin: http://www.tumblr.com"This would download a JSON object which contains the theme file (under the "theme" field).In this case, the...