Last time there were avatars, someone hacked the forum by uploading javascript to the avatar. This happened:
[img width=100 ]http://i.imgur.com/GzF0Cnf.png[/img]
Also, there was a meter saying that your bitcoins were going to be transferred to "CosbyCoins" (I wasn't here when the forum got hacked, but I have read about it.)
There should be avatar uploads in the new forum software, going to be released around February.
That's some clever shit... Did they give him a Cookie for that?
He didn't get a cookie, but they let him off without any punishment because the Mods thought it was funny too and no permanent damage was done.