Replay spam via PM bug; public note reply bug