Yeah. The fact that these things are being found -- things that deal with people's actual money -- indicates just how incompetent the average ITer is when it comes to security.

I wonder how long hackers have been exploiting these things _without_ announcing them.