So all of my reviews say "reviewed by John Cracker" and "Original Score for this review was lost."

Um...?

The original score thing is because I'm working on the site right now--and have been all day--so that should go away. I just saw the John Cracker thing about 20 minutes ago. Someone obviously had some fun with your account. I have some ideas about more measures I can implement to prevent that sort of childishness in the future, but for now it's likely to continue for a bit until whoever's responsible gets bored or gets caught.

Oh yeah, one of the mods has been having fun with my account for at least a year, switching my password to "you are gay" several times or changing my signature. It's not a very professional image for the site as a whole, but it's never bothered me, personally.

How do we know it's one of the mods? Couldn't it be a hacker or something?

We don't know it's one of the mods, though at the very least it's someone quite familiar with the community. So that leaves either a regular here who has found a security hole and thinks it's better to take advantage of it than let me know where the leak is (I haven't found it yet), or it's a mod who thinks that it's funny to abuse privileges. Either way, it needs to stop.

Speaking of troublemakers, I got an abusive HG Mail from someone named Brochacho.

I have a feeling it might be someone who was once a regular but has since decided to abandon HG for all intents and purposes except to lurk.

..first random guess that comes to mind is if any rewrite rules push a submit to a public file. Something like... if you knew the existing id, and that id is part of a sign-up script, etc..