I was clear on the password exposure and subsequent anon posts that were able to use it until BO whitelisted the new tripcode.
What I'm slightly confused about is the IP hash that BO presented which suggests 2 posts made as anonymous using the same IP hash as Q. Were these Q or were these simply from the same VPN / proxy?