http://www.technologyreview.com/business/37838/?nlid=4634   
      
   "hackers with legitimate Citi credit card accounts logged in to the website   
   and noticed that the URLs displayed data unique to each account. By changing a   
   few digits in the URL, the hackers found themselves inside other people's   
   accounts without ever having to log in as those people."   
      
   --- Thunderbird 2.0.0.24 (Windows/20100228)   
    * Origin: Fidonet Via Newsreader - http://www.easternstar.info (1:123/789)