This semester, my students were creating a website which features a to-do list. Anyone who registers on the site can create their own to-do items which they can retrieve later. Unfortunately, some of the students hadn’t quite implemented authentication properly when their sites went live, and one of their classmates was a vandal with fellatio on their mind.