A quick fix that would get 99.9% of us out of people's pics, if the User-Agent string is something unique to the frames. This would only allow HTTP requests from frames, not from desktop browsers. Yes, we can change our user agent string on the desktop browser to match, but like I say - 99.9% of people wouldn't know how.
Do we really need to do it again?
Enzymes are things invented by biologists that explain things which otherwise require harder thinking. -- Jerome Lettvin