I was playing with someone awhile back and she was able to see the URLs of people's profile pics (and subsequently post them), including mine. Not that I have a problem with it, I'm just wondering how she did it. Is there some sort of command that I'm unaware of?

If the Shockwave security settings are not set to trust off-site content, a popup window comes up whenever an icon download is attempted - and if memory serves me correctly, the URL to the content is displayed in that popup box. Running the mouse pointer over a username would be enough to find the icon URL, if that's the case.