Honestly though why did you post this? You didn't even propose a useful method of protecting against it, instead choosing to release this "big security breach" to the public.