I always thought it was an homage to Nicolas Bourbaki by pg and his friends who were using that account as a sock puppet. It was disputed https://news.ycombinator.com/item?id=21825207 I guess we'll never know.
1. Create an account.
2. To know the password, you visit a service that gives you the password.
3. The service changes the password immediately in 10 seconds before which you login.
4. You can now post stuff with the account but can't change the password allowing another user to chime in.
Now the service basically needs to not allow another user to login in 10 seconds. If the website doesn't allow multiple users to login then there needs to be an etiquette of one user at a time, although you can kick off the user after a definite amount of time if the website allows logout from all sessions.
Well lets see if it works ... I created this user overlookedscrum with a weak enough password, but you don't know it so you can't reset it.
This is the cookie ~
key: user
value: overlookedscrum&DtTI0rbgf7YKKL0Xgy65I4cJFAi962sH
I tried it with two different browsers. It seems I can login freely, but can you ?
I'll say ping below.