Hoax email blast abused poor coding in FBI website
"when you requested the confirmation code [it] was generated client-side, then sent to you via a POST Request"<p>That is shocking. What must the internal culture be like for such an idea to even be a possibility?