When I try and claim my OpenID from http://slashdot.org/my/password, the URL that slashdot tries to launch contains a bunch of unescaped strings in the querystring params.
For instance, the query string should not contain 'http://' - instead it should be 'http%3a%2f%2f'