Check out this awesome post: Security Fail