I think it's actually just some javascript that prevents clicking links from a profile to the individual photos.

Deep-linking still works without an account, so you can just right click a photo, copy the url and paste it into the URL bar.