You know what, I'm now having some serious doubts about that. There was never any password change for the supposed "friends" accounts and I think I overlooked btcltcdigger's extremely weaselly responses to that.