I spotted this when thinking about a support request. If a user chooses to hide their "Friends Of" list, it is still possible for paid users to access it via the directory by searching for Has Friend : User lists <username> as a friend. E.g. , http://www.livejournal.com/userinfo.bml?user=tinyjo&mode=full and http://www.livejournal.com/directory.bml?fr_user=tinyjo . Is this behaviour by design? If so, should there be a disclaimer in the edit info page about this?