http://www.technologyreview.com/business/37838/?nlid=4634

"hackers with legitimate Citi credit card accounts logged in to the website
and noticed that the URLs displayed data unique to each account. By changing a
few digits in the URL, the hackers found themselves inside other people's
accounts without ever having to log in as those people."

--- Thunderbird 2.0.0.24 (Windows/20100228)
 * Origin: Fidonet Via Newsreader - http://www.easternstar.info (1:123/789)