"No CAPTCHA confirmation, No verification of email address authentication, and a vulnerable JavaScript interface that any first year Computer Science student could (and did) figure out." (sportsfordorks.com) Source: sportsfordorks.com/home/2012/4/26/how-college-gameday-got-hacked.html